Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2025-48004 |
7.4 (3.1)
|
Microsoft Brokering File System Elevation of Privilege… |
Microsoft |
Windows 11 version 22H2 |
2025-10-14T17:00:06.255Z | 2026-02-26T17:47:30.156Z |
| CVE-2025-47989 |
7 (3.1)
|
Arc Enabled Servers - Azure Connected Machine Agent El… |
Microsoft |
Arc Enabled Servers - Azure Connected Machine Agent |
2025-10-14T17:00:03.764Z | 2026-02-26T17:47:30.562Z |
| CVE-2025-47361 |
7.8 (3.1)
|
Improper Validation of Array Index in Automotive Softw… |
Qualcomm, Inc. |
Snapdragon |
2025-11-04T03:19:19.924Z | 2026-02-26T17:47:30.397Z |
| CVE-2025-47360 |
7.8 (3.1)
|
Stack-based Buffer Overflow in Automotive Software pla… |
Qualcomm, Inc. |
Snapdragon |
2025-11-04T03:19:18.581Z | 2026-02-26T17:47:30.773Z |
| CVE-2025-37134 |
7.2 (3.1)
|
Authenticated Command Injection Vulnerability in the L… |
Hewlett Packard Enterprise (HPE) |
ArubaOS (AOS) |
2025-10-14T16:56:05.389Z | 2026-02-26T17:47:30.962Z |
| CVE-2025-50174 |
7 (3.1)
|
Windows Device Association Broker Service Elevation of… |
Microsoft |
Windows 11 Version 24H2 |
2025-10-14T17:00:07.552Z | 2026-02-26T17:47:29.777Z |
| CVE-2025-47368 |
7.8 (3.1)
|
Buffer Over-read in DSP Service |
Qualcomm, Inc. |
Snapdragon |
2025-11-04T03:19:24.982Z | 2026-02-26T17:47:29.071Z |
| CVE-2025-47367 |
7.8 (3.1)
|
Out-of-bounds Write in WinBlast Driver |
Qualcomm, Inc. |
Snapdragon |
2025-11-04T03:19:23.734Z | 2026-02-26T17:47:29.622Z |
| CVE-2025-47365 |
7.8 (3.1)
|
Integer Overflow or Wraparound in Automotive Platform |
Qualcomm, Inc. |
Snapdragon |
2025-11-04T03:19:22.474Z | 2026-02-26T17:47:29.940Z |
| CVE-2025-24990 |
7.8 (3.1)
|
Windows Agere Modem Driver Elevation of Privilege Vuln… |
Microsoft |
Windows 10 Version 1507 |
2025-10-14T17:00:10.973Z | 2026-02-26T17:47:29.261Z |
| CVE-2025-55339 |
7.8 (3.1)
|
Windows Network Driver Interface Specification (NDIS) … |
Microsoft |
Windows 11 version 22H2 |
2025-10-14T17:00:16.751Z | 2026-02-26T17:47:28.146Z |
| CVE-2025-55335 |
7.4 (3.1)
|
Windows NTFS Elevation of Privilege Vulnerability |
Microsoft |
Windows 10 Version 1507 |
2025-10-14T17:00:14.740Z | 2026-02-26T17:47:28.490Z |
| CVE-2025-24052 |
7.8 (3.1)
|
Windows Agere Modem Driver Elevation of Privilege Vuln… |
Microsoft |
Windows 10 Version 1507 |
2025-10-14T17:00:11.660Z | 2026-02-26T17:47:28.847Z |
| CVE-2025-20727 |
8.1 (3.1)
|
In Modem, there is a possible out of bounds write… |
MediaTek, Inc. |
MT2735, MT2737, MT6739, MT6761, MT6762, MT6762D, MT6762M, MT6763, MT6765, MT6765T, MT6767, MT6768, MT6769, MT6769K, MT6769S, MT6769T, MT6769Z, MT6771, MT6813, MT6833, MT6833P, MT6835, MT6835T, MT6853, MT6853T, MT6855, MT6855T, MT6873, MT6875, MT6875T, MT6877, MT6877T, MT6877TT, MT6878, MT6878M, MT6879, MT6880, MT6883, MT6885, MT6886, MT6889, MT6890, MT6891, MT6893, MT6895, MT6895TT, MT6896, MT6897, MT6899, MT6980, MT6980D, MT6983, MT6983T, MT6985, MT6985T, MT6989, MT6989T, MT6990, MT6991, MT8666, MT8667, MT8673, MT8675, MT8676, MT8678, MT8765, MT8766, MT8766R, MT8768, MT8771, MT8786, MT8788, MT8788E, MT8791, MT8791T, MT8792, MT8793, MT8795T, MT8797, MT8798, MT8863, MT8873, MT8883, MT8893 |
2025-11-04T06:19:40.087Z | 2026-02-26T17:47:28.676Z |
| CVE-2025-20726 |
7.5 (3.1)
|
In Modem, there is a possible out of bounds write… |
MediaTek, Inc. |
MT2735, MT2737, MT6739, MT6761, MT6762, MT6762D, MT6762M, MT6763, MT6765, MT6765T, MT6767, MT6768, MT6769, MT6769K, MT6769S, MT6769T, MT6769Z, MT6771, MT6813, MT6833, MT6833P, MT6835, MT6835T, MT6853, MT6853T, MT6855, MT6855T, MT6873, MT6875, MT6875T, MT6877, MT6877T, MT6877TT, MT6878, MT6878M, MT6879, MT6880, MT6883, MT6885, MT6886, MT6889, MT6890, MT6891, MT6893, MT6895, MT6895TT, MT6896, MT6897, MT6899, MT6980, MT6980D, MT6983, MT6983T, MT6985, MT6985T, MT6989, MT6989T, MT6990, MT6991, MT8666, MT8667, MT8673, MT8675, MT8676, MT8678, MT8765, MT8766, MT8766R, MT8768, MT8771, MT8786, MT8788, MT8788E, MT8791, MT8791T, MT8792, MT8793, MT8795T, MT8797, MT8798, MT8863, MT8873, MT8883, MT8893 |
2025-11-04T06:19:41.827Z | 2026-02-26T17:47:28.321Z |
| CVE-2025-55685 |
7 (3.1)
|
Windows PrintWorkflowUserSvc Elevation of Privilege Vu… |
Microsoft |
Windows 10 Version 21H2 |
2025-10-14T17:00:20.034Z | 2026-02-26T17:47:27.131Z |
| CVE-2025-55681 |
7 (3.1)
|
Desktop Window Manager Elevation of Privilege Vulnerability |
Microsoft |
Windows 10 Version 1809 |
2025-10-14T17:00:19.139Z | 2026-02-26T17:47:27.515Z |
| CVE-2025-55677 |
7.8 (3.1)
|
Windows Device Association Broker Service Elevation of… |
Microsoft |
Windows 11 Version 24H2 |
2025-10-14T17:00:18.544Z | 2026-02-26T17:47:27.798Z |
| CVE-2025-20730 |
6.7 (3.1)
|
In preloader, there is a possible escalation of p… |
MediaTek, Inc. |
MT2737, MT6739, MT6761, MT6765, MT6768, MT6781, MT6789, MT6833, MT6835, MT6853, MT6855, MT6877, MT6878, MT6879, MT6883, MT6885, MT6886, MT6889, MT6893, MT6895, MT6897, MT6899, MT6983, MT6985, MT6989, MT6990, MT6991, MT8188, MT8195, MT8676, MT8678, MT8696 |
2025-11-04T06:19:47.152Z | 2026-02-26T17:47:27.334Z |
| CVE-2025-20728 |
7.8 (3.1)
|
In wlan STA driver, there is a possible out of bo… |
MediaTek, Inc. |
MT7902, MT7920, MT7921, MT7922, MT7925, MT7927 |
2025-11-04T06:19:45.290Z | 2026-02-26T17:47:27.653Z |
| CVE-2025-20725 |
7.5 (3.1)
|
In ims service, there is a possible out of bounds… |
MediaTek, Inc. |
MT2735, MT2737, MT6739, MT6761, MT6762, MT6762D, MT6762M, MT6763, MT6765, MT6765T, MT6767, MT6768, MT6769, MT6769K, MT6769S, MT6769T, MT6769Z, MT6771, MT6833, MT6833P, MT6853, MT6853T, MT6855, MT6855T, MT6873, MT6875, MT6875T, MT6877, MT6877T, MT6877TT, MT6879, MT6880, MT6883, MT6885, MT6886, MT6889, MT6890, MT6891, MT6893, MT6895, MT6895TT, MT6896, MT6980, MT6980D, MT6983, MT6983T, MT6985, MT6985T, MT6989, MT6989T, MT6990, MT8666, MT8667, MT8673, MT8675, MT8765, MT8766, MT8766R, MT8768, MT8771, MT8786, MT8788, MT8788E, MT8791, MT8791T, MT8795T, MT8797, MT8798, MT8893 |
2025-11-04T06:19:43.569Z | 2026-02-26T17:47:27.959Z |
| CVE-2025-55689 |
7 (3.1)
|
Windows PrintWorkflowUserSvc Elevation of Privilege Vu… |
Microsoft |
Windows 10 Version 21H2 |
2025-10-14T17:00:21.808Z | 2026-02-26T17:47:26.112Z |
| CVE-2025-55686 |
7 (3.1)
|
Windows PrintWorkflowUserSvc Elevation of Privilege Vu… |
Microsoft |
Windows 10 Version 21H2 |
2025-10-14T17:00:20.615Z | 2026-02-26T17:47:26.681Z |
| CVE-2025-20735 |
7.8 (3.1)
|
In wlan AP driver, there is a possible out of bou… |
MediaTek, Inc. |
MT6890, MT7615, MT7622, MT7663, MT7915, MT7916, MT7981, MT7986 |
2025-11-04T06:19:50.999Z | 2026-02-26T17:47:26.431Z |
| CVE-2025-20733 |
7.8 (3.1)
|
In wlan AP driver, there is a possible out of bou… |
MediaTek, Inc. |
MT6890, MT7615, MT7622, MT7663, MT7915, MT7916, MT7981, MT7986 |
2025-11-04T06:19:49.117Z | 2026-02-26T17:47:26.955Z |
| CVE-2025-58715 |
8.8 (3.1)
|
Windows Speech Runtime Elevation of Privilege Vulnerability |
Microsoft |
Windows 10 Version 1507 |
2025-10-14T17:00:23.658Z | 2026-02-26T17:47:25.371Z |
| CVE-2025-55701 |
7.8 (3.1)
|
Windows Authentication Elevation of Privilege Vulnerability |
Microsoft |
Windows 10 Version 1507 |
2025-10-14T17:00:23.119Z | 2026-02-26T17:47:25.677Z |
| CVE-2025-20743 |
4.2 (3.1)
|
In clkdbg, there is a possible escalation of priv… |
MediaTek, Inc. |
MT2718, MT6761, MT6765, MT6768, MT6781, MT6853, MT6877, MT6886, MT6893, MT6897, MT6899, MT6983, MT6989, MT6991, MT8113, MT8163, MT8168, MT8169, MT8183, MT8186, MT8188, MT8195, MT8196, MT8321, MT8365, MT8385, MT8390, MT8391, MT8512, MT8516, MT8519, MT8676, MT8678, MT8695, MT8696, MT8698, MT8755, MT8766, MT8768, MT8771, MT8775, MT8781, MT8786, MT8788E, MT8791T, MT8792, MT8793, MT8796, MT8797, MT8798, MT8873, MT8883, MT8893 |
2025-11-04T06:19:57.990Z | 2026-02-26T17:47:25.102Z |
| CVE-2025-20742 |
8 (3.1)
|
In wlan AP driver, there is a possible out of bou… |
MediaTek, Inc. |
MT6890, MT7603, MT7615, MT7622, MT7915, MT7916, MT7981, MT7986 |
2025-11-04T06:19:56.287Z | 2026-02-26T17:47:25.532Z |
| CVE-2025-20737 |
7.8 (3.1)
|
In wlan AP driver, there is a possible out of bou… |
MediaTek, Inc. |
MT6890, MT7615, MT7622, MT7663, MT7915, MT7916, MT7981, MT7986 |
2025-11-04T06:19:52.883Z | 2026-02-26T17:47:25.862Z |
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2026-2860 |
5.3 (4.0)
6.3 (3.1)
6.3 (3.0)
|
feng_ha_ha/megagao ssm-erp/production_ssm EmployeeCont… |
feng_ha_ha |
ssm-erp |
2026-02-21T04:32:06.851Z | 2026-02-24T15:37:22.550Z |
| CVE-2026-27579 |
7.4 (3.1)
|
CollabPlatform : CORS Misconfiguration Allows Arbitrar… |
karnop |
realtime-collaboration-platform |
2026-02-21T10:22:15.671Z | 2026-02-24T18:07:30.160Z |
| CVE-2026-27469 |
6.1 (3.1)
|
Isso: Stored XSS via comment website field |
isso-comments |
isso |
2026-02-21T07:24:38.971Z | 2026-02-24T18:50:07.650Z |
| CVE-2026-27452 |
9.2 (4.0)
|
ASN.1 TypeScript Library: Decoding an INTEGER could le… |
JonathanWilbur |
asn1-ts |
2026-02-21T06:50:35.877Z | 2026-02-24T18:54:48.702Z |
| CVE-2026-27206 |
8.1 (3.1)
|
Zumba Json Serializer has a potential PHP Object Injec… |
zumba |
json-serializer |
2026-02-21T07:01:00.843Z | 2026-02-24T18:57:10.054Z |
| CVE-2026-27203 |
8.3 (3.1)
|
eBay API MCP Server Affected by Environment Variable I… |
YosefHayim |
ebay-mcp |
2026-02-20T23:30:46.134Z | 2026-02-25T21:29:27.100Z |
| CVE-2026-27199 |
6.3 (4.0)
|
Werkzeug safe_join() allows Windows special device names |
pallets |
werkzeug |
2026-02-21T05:15:53.335Z | 2026-02-24T19:02:19.689Z |
| CVE-2026-27198 |
8.8 (3.1)
|
Formwork Improperly Manages Privileges During User Creation |
getformwork |
formwork |
2026-02-21T05:11:42.535Z | 2026-02-24T19:01:22.284Z |
| CVE-2026-27196 |
8.1 (3.1)
|
Statamic affected by privilege escalation via stored C… |
statamic |
cms |
2026-02-21T04:30:05.184Z | 2026-02-24T18:59:19.390Z |
| CVE-2026-26365 |
4 (3.1)
|
Akamai Ghost on Akamai CDN edge servers before 20… |
Akamai |
Ghost |
2026-02-23T00:00:00.000Z | 2026-02-23T20:58:59.805Z |
| CVE-2026-2635 |
9.8 (3.0)
|
MLflow Use of Default Password Authentication Bypass V… |
MLflow |
MLflow |
2026-02-20T22:25:03.494Z | 2026-02-27T04:55:48.854Z |
| CVE-2026-2492 |
7 (3.0)
|
TensorFlow HDF5 Library Uncontrolled Search Path Eleme… |
TensorFlow |
TensorFlow |
2026-02-20T22:22:54.392Z | 2026-02-28T04:55:41.592Z |
| CVE-2026-2490 |
5.5 (3.0)
|
RustDesk Client for Windows Transfer File Link Followi… |
RustDesk |
Client for Windows |
2026-02-20T22:24:43.064Z | 2026-02-24T15:16:07.584Z |
| CVE-2026-24494 |
9.8 (3.1)
|
SQL injection vulnerability in Order Up Online Orderin… |
Order Up |
Online Ordering System |
2026-02-23T01:24:47.676Z | 2026-02-23T13:47:41.202Z |
| CVE-2026-2385 |
5.3 (3.1)
|
The Plus Addons for Elementor – Addons for Elementor, … |
posimyththemes |
The Plus Addons for Elementor – Addons for Elementor, Page Templates, Widgets, Mega Menu, WooCommerce |
2026-02-22T08:24:44.635Z | 2026-02-25T18:30:50.182Z |
| CVE-2026-2040 |
7.3 (3.0)
|
PDF-XChange Editor TrackerUpdate Uncontrolled Search P… |
PDF-XChange |
PDF-XChange Editor |
2026-02-20T22:21:17.790Z | 2026-02-24T15:07:07.127Z |
| CVE-2026-1787 |
4.8 (3.1)
|
LearnPress Export Import <= 4.1.0 - Missing Authentica… |
thimpress |
LearnPress – Backup & Migration Tool |
2026-02-21T10:37:17.153Z | 2026-02-24T18:03:03.057Z |
| CVE-2026-1367 |
8.3 (3.1)
|
SQL Injection |
Zohocorp |
ManageEngine ADSelfService Plus |
2026-02-23T06:54:25.937Z | 2026-02-26T14:44:11.687Z |
| CVE-2025-70043 |
9.1 (3.1)
|
An issue pertaining to CWE-295: Improper Certific… |
n/a |
n/a |
2026-02-23T00:00:00.000Z | 2026-02-23T15:59:10.410Z |
| CVE-2025-41002 |
9.3 (4.0)
|
SQL injection in Infoticketing |
MANANTIAL DE IDEAS |
Infoticketing |
2026-02-23T09:30:22.990Z | 2026-02-24T13:27:24.061Z |
| CVE-2025-40986 |
5.1 (4.0)
|
Reflected Cross-Site Scripting in PideTuCita |
PideTuCita |
PideTuCita |
2026-02-23T10:31:25.455Z | 2026-02-24T13:24:29.061Z |
| CVE-2025-40701 |
5.1 (4.0)
|
Reflected Cross-Site scripting (XSS) in SOTE's SOTESHOP |
SOTE |
SOTESHOP |
2026-02-23T10:23:51.497Z | 2026-02-24T13:25:45.940Z |
| CVE-2025-14339 |
6.5 (3.1)
|
weMail <= 2.0.7 - Missing Authorization to Unauthentic… |
wedevs |
weMail: Email Marketing, Email Automation, Newsletters, Subscribers & eCommerce Email Optins |
2026-02-21T09:27:59.721Z | 2026-02-25T21:18:46.447Z |
| CVE-2019-25462 |
8.8 (4.0)
8.2 (3.1)
|
Web Ofisi Rent a Car v3 SQL Injection via klima Parameter |
Web-ofisi |
Rent a Car |
2026-02-22T14:12:15.978Z | 2026-02-23T19:03:38.927Z |
| CVE-2019-25446 |
8.8 (4.0)
8.2 (3.1)
|
DIGIT CENTRIS ERP Every version SQL Injection via datu… |
Digit-Rs |
DIGIT CENTRIS |
2026-02-22T13:18:23.861Z | 2026-02-25T16:18:40.463Z |
| CVE-2019-25443 |
8.8 (4.0)
8.2 (3.1)
|
Inventory Webapp SQL Injection via add-item.php |
edlangley |
inventory-webapp |
2026-02-22T13:18:23.010Z | 2026-02-25T16:19:26.762Z |
| CVE-2019-25440 |
8.8 (4.0)
8.2 (3.1)
|
WebIncorp ERP Every version SQL Injection via product_… |
Webincorp |
WebIncorp ERP |
2026-02-22T13:34:37.038Z | 2026-02-23T19:05:54.854Z |
| CVE-2019-25439 |
8.8 (4.0)
8.2 (3.1)
|
NoviSmart CMS SQL Injection via Referer HTTP Header |
Novismart |
NoviSmart CMS |
2026-02-22T13:34:36.159Z | 2026-02-23T19:06:44.570Z |
| CVE-2019-25433 |
8.8 (4.0)
8.2 (3.1)
|
XOOPS CMS 2.5.9 SQL Injection via gerar_pdf.php |
Xoops |
XOOPS CMS |
2026-02-22T13:34:35.308Z | 2026-02-23T19:07:26.710Z |
| CVE-2019-25391 |
8.8 (4.0)
8.2 (3.1)
|
Ashop Shopping Cart Software Lastest Latest SQL Inject… |
Ashopsoftware |
Ashop Shopping Cart Software |
2026-02-22T13:43:50.775Z | 2026-02-25T16:06:30.174Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| fkie_cve-2020-0761 | <p>A remote code execution vulnerability exists when Active Directory integrated DNS (ADIDNS) misha… | 2020-09-11T17:15:13.573 | 2026-02-23T17:18:24.603 |
| fkie_cve-2020-0718 | <p>A remote code execution vulnerability exists when Active Directory integrated DNS (ADIDNS) misha… | 2020-09-11T17:15:13.510 | 2026-02-23T17:18:14.987 |
| fkie_cve-2020-0664 | <p>An information disclosure vulnerability exists when Active Directory integrated DNS (ADIDNS) mis… | 2020-09-11T17:15:13.137 | 2026-02-23T17:18:03.433 |
| fkie_cve-2020-0648 | <p>An elevation of privilege vulnerability exists when the Windows RSoP Service Application imprope… | 2020-09-11T17:15:13.057 | 2026-02-23T17:18:00.753 |
| fkie_cve-2020-0604 | A remote code execution vulnerability exists in Visual Studio Code when it process environment vari… | 2020-08-17T19:15:13.817 | 2026-02-23T17:17:50.113 |
| fkie_cve-2026-25996 | Inspektor Gadget is a set of tools and framework for data collection and system inspection on Kuber… | 2026-02-12T21:16:02.820 | 2026-02-23T17:17:11.530 |
| fkie_cve-2025-41743 | Insufficient encryption strength in Sprecher Automation SPRECON-E-C, SPRECON-E-P, and SPRECON-E-T3 … | 2025-12-02T11:15:51.493 | 2026-02-23T17:16:10.343 |
| fkie_cve-2025-41742 | Sprecher Automations SPRECON-E-C, SPRECON-E-P, SPRECON-E-T3 is vulnerable to attack by an unauthor… | 2025-12-02T11:15:51.153 | 2026-02-23T17:15:44.987 |
| fkie_cve-2025-41744 | Sprecher Automations SPRECON-E series uses default cryptographic keys that allow an unprivileged re… | 2025-12-02T11:15:51.760 | 2026-02-23T17:15:02.780 |
| fkie_cve-2026-26011 | navigation2 is a ROS 2 Navigation Framework and System. In 1.3.11 and earlier, a critical heap out-… | 2026-02-12T21:16:03.340 | 2026-02-23T17:00:05.130 |
| fkie_cve-2026-26069 | Scraparr is a Prometheus Exporter for various components of the *arr Suite. From 3.0.0-beta to befo… | 2026-02-12T22:16:06.670 | 2026-02-23T16:58:36.867 |
| fkie_cve-2026-26075 | FastGPT is an AI Agent building platform. Due to the fact that FastGPT's web page acquisition nodes… | 2026-02-12T22:16:06.817 | 2026-02-23T16:52:24.110 |
| fkie_cve-2026-27072 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2026-02-20T16:22:45.037 | 2026-02-23T16:29:37.117 |
| fkie_cve-2026-0865 | User-controlled header names and values containing newlines can allow injecting HTTP headers. | 2026-01-20T22:15:52.800 | 2026-02-23T16:29:36.547 |
| fkie_cve-2019-5997 | Video Insight VMS versions prior to 7.6.1 allow remote attackers to conduct code injection attacks … | 2020-05-20T11:15:10.270 | 2026-02-23T16:24:56.547 |
| fkie_cve-2024-55270 | phpgurukul Student Management System 1.0 is vulnerable to SQL Injection in studentms/admin/search.p… | 2026-02-17T18:20:27.850 | 2026-02-23T16:23:33.267 |
| fkie_cve-2025-15348 | Anritsu ShockLine CHX File Parsing Deserialization of Untrusted Data Remote Code Execution Vulnerab… | 2026-01-23T04:16:01.310 | 2026-02-23T16:22:13.080 |
| fkie_cve-2025-15349 | Anritsu ShockLine SCPI Race Condition Remote Code Execution Vulnerability. This vulnerability allow… | 2026-01-23T04:16:01.450 | 2026-02-23T16:20:45.333 |
| fkie_cve-2019-2391 | Incorrect parsing of certain JSON input may result in js-bson not correctly serializing BSON. This … | 2020-03-31T14:15:14.173 | 2026-02-23T16:20:42.267 |
| fkie_cve-2019-2390 | An unprivileged user or program on Microsoft Windows which can create OpenSSL configuration files i… | 2019-08-30T15:15:11.050 | 2026-02-23T16:20:42.060 |
| fkie_cve-2019-2388 | In affected Ops Manager versions there is an exposed http route was that may allow attackers to vie… | 2020-05-13T17:15:11.717 | 2026-02-23T16:20:41.743 |
| fkie_cve-2019-2386 | After user deletion in MongoDB Server the improper invalidation of authorization sessions allows an… | 2019-08-06T19:15:13.613 | 2026-02-23T16:20:41.457 |
| fkie_cve-2025-15350 | Anritsu VectorStar CHX File Parsing Deserialization of Untrusted Data Remote Code Execution Vulnera… | 2026-01-23T04:16:01.580 | 2026-02-23T16:17:10.400 |
| fkie_cve-2025-15351 | Anritsu VectorStar CHX File Parsing Deserialization of Untrusted Data Remote Code Execution Vulnera… | 2026-01-23T04:16:01.710 | 2026-02-23T16:16:26.720 |
| fkie_cve-2025-70149 | CodeAstro Membership Management System 1.0 is vulnerable to SQL Injection in print_membership_card.… | 2026-02-18T17:21:36.160 | 2026-02-23T16:13:40.210 |
| fkie_cve-2025-70150 | CodeAstro Membership Management System 1.0 contains a missing authentication vulnerability in delet… | 2026-02-18T18:24:20.040 | 2026-02-23T16:13:10.940 |
| fkie_cve-2024-55271 | A Cross-Site Request Forgery (CSRF) vulnerability has been identified in phpgurukul Gym Management … | 2026-02-17T17:21:03.690 | 2026-02-23T16:06:41.923 |
| fkie_cve-2026-20796 | Mattermost versions 10.11.x <= 10.11.9 fail to properly validate channel membership at the time of … | 2026-02-13T11:16:10.280 | 2026-02-23T15:53:11.073 |
| fkie_cve-2026-26076 | ntpd-rs is a full-featured implementation of the Network Time Protocol. Prior to 1.7.1, an attacker… | 2026-02-12T22:16:06.960 | 2026-02-23T15:51:55.747 |
| fkie_cve-2025-70141 | SourceCodester Customer Support System 1.0 contains an incorrect access control vulnerability in aj… | 2026-02-18T17:21:35.700 | 2026-02-23T15:44:06.497 |
| ID | Severity | Description | Published | Updated |
|---|---|---|---|---|
| ghsa-f4qw-9xx8-rwgr |
4.4 (3.1)
|
The Allow HTML in Category Descriptions plugin for WordPress is vulnerable to Stored Cross-Site Scr… | 2026-02-14T09:31:33Z | 2026-02-14T09:31:33Z |
| ghsa-cvgg-m9hw-r94w |
6.4 (3.1)
|
The Press3D plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 3D Model Gute… | 2026-02-14T09:31:33Z | 2026-02-14T09:31:33Z |
| ghsa-cchp-7wr7-98gf |
4.3 (3.1)
|
The Smart Forms plugin for WordPress is vulnerable to unauthorized access of data due to a missing … | 2026-02-14T09:31:33Z | 2026-02-14T09:31:33Z |
| ghsa-8xxh-rwxq-w2fc |
6.1 (3.1)
|
The Geo Widget plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the URL path i… | 2026-02-14T09:31:33Z | 2026-02-14T09:31:33Z |
| ghsa-8jp5-qrhm-p8v5 |
6.1 (3.1)
|
The Address Bar Ads plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the UR… | 2026-02-14T09:31:33Z | 2026-02-14T09:31:33Z |
| ghsa-8gh7-8v8f-6f45 |
5.3 (3.1)
|
The CallbackKiller service widget plugin for WordPress is vulnerable to unauthorized modification o… | 2026-02-14T09:31:33Z | 2026-02-14T09:31:33Z |
| ghsa-6m5f-57jg-w742 |
9.8 (3.1)
|
The midi-Synth plugin for WordPress is vulnerable to arbitrary file uploads due to missing file typ… | 2026-02-14T09:31:33Z | 2026-02-14T09:31:33Z |
| ghsa-59rj-2hg2-476v |
6.1 (3.1)
|
The StyleBidet plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the URL pat… | 2026-02-14T09:31:33Z | 2026-02-14T09:31:33Z |
| ghsa-4q47-jxhq-7fj2 |
4.3 (3.1)
|
The WP Quick Contact Us plugin for WordPress is vulnerable to Cross-Site Request Forgery in all ver… | 2026-02-14T09:31:33Z | 2026-02-14T09:31:33Z |
| ghsa-4p4p-xgjx-qcc9 |
5.3 (3.1)
|
The MailChimp Campaigns plugin for WordPress is vulnerable to Missing Authorization in all versions… | 2026-02-14T09:31:33Z | 2026-02-14T09:31:33Z |
| ghsa-4j5m-vc2q-295r |
6.4 (3.1)
|
The Payment Page | Payment Form for Stripe plugin for WordPress is vulnerable to Stored Cross-Site … | 2026-02-14T09:31:33Z | 2026-02-14T09:31:33Z |
| ghsa-45r3-ggw3-q62c |
7.2 (3.1)
|
The Super Simple Contact Form plugin for WordPress is vulnerable to Reflected Cross-Site Scripting … | 2026-02-14T09:31:33Z | 2026-02-14T09:31:33Z |
| ghsa-3hmx-xfr5-8hq6 |
6.4 (3.1)
|
The Ravelry Designs Widget plugin for WordPress is vulnerable to Stored Cross-Site Scripting via th… | 2026-02-14T09:31:33Z | 2026-02-14T09:31:33Z |
| ghsa-qp2f-j6qh-vgqx |
4.4 (3.1)
|
The Link Hopper plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘hop_name… | 2026-02-14T09:31:32Z | 2026-02-14T09:31:32Z |
| ghsa-h9rw-4pm8-962h |
5.3 (3.1)
|
The One to one user Chat by WPGuppy plugin for WordPress is vulnerable to unauthorized access of da… | 2026-02-14T09:31:32Z | 2026-02-14T09:31:32Z |
| ghsa-67pm-pg4r-8ff4 |
4.3 (3.1)
|
The LatePoint – Calendar Booking Plugin for Appointments and Events plugin for WordPress is vulnera… | 2026-02-14T09:31:32Z | 2026-02-14T09:31:32Z |
| ghsa-3cx2-gf73-34wr |
4.3 (3.1)
|
The MDirector Newsletter plugin for WordPress is vulnerable to Cross-Site Request Forgery in all ve… | 2026-02-14T09:31:32Z | 2026-02-14T09:31:32Z |
| ghsa-xh3r-gpf9-2v95 |
7.5 (3.1)
|
The BlueSnap Payment Gateway for WooCommerce plugin for WordPress is vulnerable to Missing Authoriz… | 2026-02-14T06:30:58Z | 2026-02-14T06:30:58Z |
| ghsa-w8xp-8wjp-8rcf |
|
Rejected reason: Not used | 2026-02-14T06:30:58Z | 2026-02-14T06:30:58Z |
| ghsa-qrpm-ph3r-w26w |
4.3 (3.1)
|
The SEATT: Simple Event Attendance plugin for WordPress is vulnerable to Cross-Site Request Forgery… | 2026-02-14T06:30:58Z | 2026-02-14T06:30:58Z |
| ghsa-gjxr-jc3p-683p |
5.3 (3.1)
|
The Appointment Booking Calendar Plugin – Bookr plugin for WordPress is vulnerable to unauthorized … | 2026-02-14T06:30:58Z | 2026-02-14T06:30:58Z |
| ghsa-9pqx-6794-4f2c |
8.1 (3.1)
|
The Magic Login Mail or QR Code plugin for WordPress is vulnerable to Privilege Escalation in all v… | 2026-02-14T06:30:58Z | 2026-02-14T06:30:58Z |
| ghsa-7vxf-c7r5-6293 |
6.4 (3.1)
|
The Simple Wp colorfull Accordion plugin for WordPress is vulnerable to Stored Cross-Site Scripting… | 2026-02-14T06:30:58Z | 2026-02-14T06:30:58Z |
| ghsa-72q5-4qh8-7556 |
6.1 (3.1)
|
The Easy Voice Mail plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘mess… | 2026-02-14T06:30:58Z | 2026-02-14T06:30:58Z |
| ghsa-3fvr-9rw3-q3hc |
6.4 (3.1)
|
The Citations tools plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'code… | 2026-02-14T06:30:58Z | 2026-02-14T06:30:58Z |
| ghsa-335p-m75m-6r4h |
6.1 (3.1)
|
The personal-authors-category plugin for WordPress is vulnerable to Reflected Cross-Site Scripting … | 2026-02-14T06:30:58Z | 2026-02-14T06:30:58Z |
| ghsa-26cj-h8gp-hcf9 |
4.4 (3.1)
|
The AMP Enhancer – Compatibility Layer for Official AMP Plugin for WordPress is vulnerable to Store… | 2026-02-14T06:30:58Z | 2026-02-14T06:30:58Z |
| ghsa-xv85-h7cp-9wff |
|
Rejected reason: Not used | 2026-02-14T06:30:57Z | 2026-02-14T06:30:57Z |
| ghsa-w5rw-6rc6-433j |
|
Rejected reason: Not used | 2026-02-14T06:30:57Z | 2026-02-14T06:30:57Z |
| ghsa-v88q-2f34-49rp |
|
Rejected reason: Not used | 2026-02-14T06:30:57Z | 2026-02-14T06:30:57Z |
| ID | Severity | Description | Package | Published | Updated |
|---|---|---|---|---|---|
| pysec-2020-209 |
|
A flaw was found in the Ansible Engine, in ansible-engine 2.8.x before 2.8.15 and ansible… | ansible | 2020-09-23T13:15:00Z | 2021-07-02T02:41:35.012028Z |
| pysec-2021-105 |
|
A flaw was found in the use of insufficiently random values in Ansible. Two random passwo… | ansible | 2021-05-27T19:15:00Z | 2021-07-02T02:41:34.811883Z |
| pysec-2020-208 |
|
An incomplete fix was found for the fix of the flaw CVE-2020-1733 ansible: insecure tempo… | ansible | 2020-05-15T14:15:00Z | 2021-07-02T02:41:34.927743Z |
| pysec-2020-207 |
|
A flaw was found in Ansible Engine, all versions 2.7.x, 2.8.x and 2.9.x prior to 2.7.17, … | ansible | 2020-03-24T14:15:00Z | 2021-07-02T02:41:34.761872Z |
| pysec-2020-206 |
|
A vulnerability was found in Ansible Engine versions 2.9.x before 2.9.3, 2.8.x before 2.8… | ansible | 2020-03-31T17:15:00Z | 2021-07-02T02:41:34.645049Z |
| pysec-2019-146 |
|
ansible before versions 2.8.6, 2.7.14, 2.6.20 is vulnerable to a None | ansible | 2019-11-26T14:15:00Z | 2021-07-02T02:41:34.512855Z |
| pysec-2019-145 |
|
ansible-playbook -k and ansible cli tools, all versions 2.8.x before 2.8.4, all 2.7.x bef… | ansible | 2019-11-22T13:15:00Z | 2021-07-02T02:41:34.397311Z |
| pysec-2018-44 |
|
Ansible "User" module leaks any data which is passed on as a parameter to ssh-keygen. Thi… | ansible | 2018-10-23T15:29:00Z | 2021-07-02T02:41:34.271290Z |
| pysec-2018-43 |
|
A flaw was found in ansible. ansible.cfg is read from the current working directory which… | ansible | 2018-07-13T22:29:00Z | 2021-07-02T02:41:34.153569Z |
| pysec-2018-42 |
|
Ansible 2.5 prior to 2.5.5, and 2.4 prior to 2.4.5, do not honor the no_log task flag for… | ansible | 2018-07-03T01:29:00Z | 2021-07-02T02:41:34.017806Z |
| pysec-2020-205 |
|
Multiple argument injection vulnerabilities in Ansible before 1.6.7 allow remote attacker… | ansible | 2020-02-18T15:15:00Z | 2021-07-02T02:41:33.376176Z |
| pysec-2020-204 |
|
Ansible before 1.6.7 does not prevent inventory data with "{{" and "lookup" substrings, a… | ansible | 2020-02-18T15:15:00Z | 2021-07-02T02:41:33.333300Z |
| pysec-2020-203 |
|
The safe_eval function in Ansible before 1.6.4 does not properly restrict the code subset… | ansible | 2020-02-20T03:15:00Z | 2021-07-02T02:41:33.286907Z |
| pysec-2020-202 |
|
Ansible before 1.5.5 constructs filenames containing user and password fields on the basi… | ansible | 2020-02-20T03:15:00Z | 2021-07-02T02:41:33.239912Z |
| pysec-2020-201 |
|
Ansible before 1.5.5 sets 0644 permissions for sources.list, which might allow local user… | ansible | 2020-02-20T15:15:00Z | 2021-07-02T02:41:33.195519Z |
| pysec-2020-200 |
|
The vault subsystem in Ansible before 1.5.5 does not set the umask before creation or mod… | ansible | 2020-02-20T15:15:00Z | 2021-07-02T02:41:33.150700Z |
| pysec-2020-199 |
|
The safe_eval function in Ansible before 1.5.4 does not properly restrict the code subset… | ansible | 2020-02-20T15:15:00Z | 2021-07-02T02:41:33.107799Z |
| pysec-2020-198 |
|
Ansible prior to 1.5.4 mishandles the evaluation of some strings. | ansible | 2020-01-09T13:15:00Z | 2021-07-02T02:41:33.018970Z |
| pysec-2018-41 |
|
Ansible before versions 2.3.1.0 and 2.4.0.0 fails to properly mark lookup-plugin results … | ansible | 2018-07-19T13:29:00Z | 2021-07-02T02:41:33.849138Z |
| pysec-2018-40 |
|
Ansible before version 2.3 has an input validation vulnerability in the handling of data … | ansible | 2018-06-22T13:29:00Z | 2021-07-02T02:41:33.763354Z |
| pysec-2018-39 |
|
Ansible before versions 2.1.4, 2.2.1 is vulnerable to an improper input validation in Ans… | ansible | 2018-04-24T16:29:00Z | 2021-07-02T02:41:33.713953Z |
| pysec-2018-38 |
|
Ansible before version 2.2.0 fails to properly sanitize fact variables sent from the Ansi… | ansible | 2018-07-31T20:29:00Z | 2021-07-02T02:41:33.612895Z |
| pysec-2018-37 |
|
A flaw was found in Ansible before version 2.2.0. The apt_key module does not properly ve… | ansible | 2018-07-31T21:29:00Z | 2021-07-02T02:41:33.569568Z |
| pysec-2017-4 |
|
A flaw was found in the way Ansible (2.3.x before 2.3.3, and 2.4.x before 2.4.1) passed c… | ansible | 2017-11-21T17:29:00Z | 2021-07-02T02:41:33.938371Z |
| pysec-2017-3 |
|
The chroot, jail, and zone connection plugins in ansible before 1.9.2 allow local users t… | ansible | 2017-06-07T20:29:00Z | 2021-07-02T02:41:33.471109Z |
| pysec-2017-2 |
|
The user module in ansible before 1.6.6 allows remote authenticated users to execute arbi… | ansible | 2017-06-08T18:29:00Z | 2021-07-02T02:41:33.064199Z |
| pysec-2016-1 |
|
The create_script function in the lxc_container module in Ansible before 1.9.6-1 and 2.x … | ansible | 2016-06-03T14:59:00Z | 2021-07-02T02:41:33.519196Z |
| pysec-2015-1 |
|
Ansible before 1.9.2 does not verify that the server hostname matches a domain name in th… | ansible | 2015-08-12T14:59:00Z | 2021-07-02T02:41:33.423322Z |
| pysec-2018-36 |
|
Ansible before 1.2.1 makes it easier for remote attackers to conduct man-in-the-middle at… | ansible | 2018-05-04T20:29:00Z | 2021-07-02T02:41:32.885648Z |
| pysec-2018-35 |
|
aio-libs aiohttp-session version 2.6.0 and earlier contains a Other/Unknown vulnerability… | aiohttp-session | 2018-12-20T15:29:00Z | 2021-07-02T02:41:32.834524Z |
| ID | Description | Updated |
|---|---|---|
| gsd-2024-3348 | A vulnerability classified as critical has been found in SourceCodester Aplaya Beach Reso… | 2024-04-11T05:03:27.271700Z |
| gsd-2024-3347 | A vulnerability was found in SourceCodester Airline Ticket Reservation System 1.0. It has… | 2024-04-11T05:03:27.120017Z |
| gsd-2024-3346 | A vulnerability was found in Byzoro Smart S80 up to 20240328. It has been declared as cri… | 2024-04-11T05:03:27.309732Z |
| gsd-2024-3345 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:27.076692Z |
| gsd-2024-3344 | The Otter Blocks – Gutenberg Blocks, Page Builder for Gutenberg Editor & FSE plugin for W… | 2024-04-11T05:03:27.060660Z |
| gsd-2024-3343 | The Otter Blocks – Gutenberg Blocks, Page Builder for Gutenberg Editor & FSE plugin for W… | 2024-04-11T05:03:27.166355Z |
| gsd-2024-3342 | The Timetable and Event Schedule by MotoPress plugin for WordPress is vulnerable to SQL I… | 2024-04-11T05:03:27.402495Z |
| gsd-2024-3341 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:27.301053Z |
| gsd-2024-3340 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:27.429943Z |
| gsd-2024-3339 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:27.263258Z |
| gsd-2024-3338 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:27.111800Z |
| gsd-2024-3337 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:27.062743Z |
| gsd-2024-3336 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:27.425049Z |
| gsd-2024-3335 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:27.412287Z |
| gsd-2024-3334 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:27.288283Z |
| gsd-2024-3333 | The Essential Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Sit… | 2024-04-11T05:03:27.404703Z |
| gsd-2024-3332 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:27.420637Z |
| gsd-2024-3331 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:27.190011Z |
| gsd-2024-3330 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:27.292829Z |
| gsd-2024-3329 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:27.144654Z |
| gsd-2024-3328 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:27.146224Z |
| gsd-2024-3327 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:27.367458Z |
| gsd-2024-3326 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:27.099206Z |
| gsd-2024-3325 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:27.187222Z |
| gsd-2024-3324 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:27.159785Z |
| gsd-2024-3323 | Cross Site Scripting in UI Request/Response Validation in TIBCO JasperReports Server … | 2024-04-11T05:03:27.132126Z |
| gsd-2024-3322 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:27.246760Z |
| gsd-2024-3321 | A vulnerability classified as problematic has been found in SourceCodester eLearning Syst… | 2024-04-11T05:03:27.409204Z |
| gsd-2024-3320 | A vulnerability was found in SourceCodester eLearning System 1.0. It has been rated as pr… | 2024-04-11T05:03:27.051075Z |
| gsd-2024-3319 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:27.323120Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| mal-2025-191698 | Malicious code in callistopy (PyPI) | 2025-07-05T10:23:57Z | 2025-12-31T02:45:15Z |
| mal-2025-191694 | Malicious code in bprintoor (PyPI) | 2025-02-13T13:18:05Z | 2025-12-31T02:45:15Z |
| mal-2025-191689 | Malicious code in backtradingbot (PyPI) | 2025-07-31T08:37:38Z | 2025-12-31T02:45:15Z |
| mal-2025-191688 | Malicious code in axonify (PyPI) | 2025-03-18T09:49:12Z | 2025-12-31T02:45:15Z |
| mal-2025-191686 | Malicious code in aws-enumerateiam (PyPI) | 2025-11-18T23:47:36Z | 2025-12-31T02:45:15Z |
| mal-2025-191681 | Malicious code in anothertestproject (PyPI) | 2025-10-08T12:45:34Z | 2025-12-31T02:45:15Z |
| mal-2025-191678 | Malicious code in amd-taichi (PyPI) | 2025-09-15T14:34:20Z | 2025-12-31T02:45:15Z |
| mal-2025-191674 | Malicious code in aiogram-msgeffect (PyPI) | 2025-11-22T16:25:53Z | 2025-12-31T02:45:15Z |
| mal-2025-191658 | Malicious code in richx (PyPI) | 2025-10-31T13:39:17Z | 2025-12-31T02:45:15Z |
| mal-2025-191655 | Malicious code in rando0192490 (PyPI) | 2025-10-19T16:48:34Z | 2025-12-31T02:45:15Z |
| mal-2025-191653 | Malicious code in ptxcompiler (PyPI) | 2025-10-17T15:20:16Z | 2025-12-31T02:45:15Z |
| mal-2025-191651 | Malicious code in my-first-pypi-demo (PyPI) | 2025-08-20T16:33:25Z | 2025-12-31T02:45:15Z |
| mal-2025-191650 | Malicious code in musl-dev (PyPI) | 2025-10-16T09:20:43Z | 2025-12-31T02:45:15Z |
| mal-2025-191649 | Malicious code in md5-en (PyPI) | 2025-10-15T20:24:59Z | 2025-12-31T02:45:15Z |
| mal-2025-191647 | Malicious code in mcp-runcommand-server (PyPI) | 2025-10-10T10:05:00Z | 2025-12-31T02:45:15Z |
| mal-2025-191646 | Malicious code in makronlox (PyPI) | 2025-10-16T20:06:59Z | 2025-12-31T02:45:15Z |
| mal-2025-191644 | Malicious code in lbank-connector-pythons (PyPI) | 2025-10-22T12:45:32Z | 2025-12-31T02:45:15Z |
| mal-2025-191643 | Malicious code in krisp-audio (PyPI) | 2025-11-02T16:54:07Z | 2025-12-31T02:45:15Z |
| mal-2025-191640 | Malicious code in install-all-setup (PyPI) | 2025-10-29T21:52:42Z | 2025-12-31T02:45:15Z |
| mal-2025-191636 | Malicious code in humunculous591014 (PyPI) | 2025-10-19T16:45:19Z | 2025-12-31T02:45:15Z |
| mal-2025-191634 | Malicious code in humunculous5910 (PyPI) | 2025-10-19T16:57:22Z | 2025-12-31T02:45:15Z |
| mal-2025-191631 | Malicious code in hexdecpy (PyPI) | 2025-10-24T21:59:02Z | 2025-12-31T02:45:15Z |
| mal-2025-191630 | Malicious code in hexdecli (PyPI) | 2025-10-25T16:03:26Z | 2025-12-31T02:45:15Z |
| mal-2025-191624 | Malicious code in ethaddrlib (PyPI) | 2025-10-25T09:03:01Z | 2025-12-31T02:45:15Z |
| mal-2025-1514 | Malicious code in ninjainjtest1337 (PyPI) | 2024-08-23T22:55:41Z | 2025-12-31T02:45:15Z |
| mal-2024-9962 | Malicious code in colorbytes (PyPI) | 2024-09-08T17:47:46Z | 2025-12-31T02:45:15Z |
| mal-2024-9947 | Malicious code in audio-separator-fork (PyPI) | 2024-08-11T12:09:25Z | 2025-12-31T02:45:15Z |
| mal-2024-9938 | Malicious code in aiotrans (PyPI) | 2024-08-14T22:01:30Z | 2025-12-31T02:45:15Z |
| mal-2024-9937 | Malicious code in aiohttp-libscss (PyPI) | 2024-08-10T13:21:32Z | 2025-12-31T02:45:15Z |
| mal-2024-9271 | Malicious code in lab-3-package-438d82fc (PyPI) | 2024-08-10T23:05:21Z | 2025-12-31T02:45:15Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| wid-sec-w-2025-0272 | Dell Avamar: Schwachstelle ermöglicht Erlangen von Benutzerrechten | 2025-02-05T23:00:00.000+00:00 | 2025-02-05T23:00:00.000+00:00 |
| wid-sec-w-2024-3584 | Red Hat Ansible Automation Platform: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen | 2024-12-03T23:00:00.000+00:00 | 2025-02-05T23:00:00.000+00:00 |
| wid-sec-w-2024-2091 | Siemens SIMATIC WinCC: Mehrere Schwachstellen ermöglichen Denial of Service | 2024-09-09T22:00:00.000+00:00 | 2025-02-05T23:00:00.000+00:00 |
| wid-sec-w-2024-1307 | Red Hat OpenShift Service Mesh Containers: Mehrere Schwachstellen | 2024-06-06T22:00:00.000+00:00 | 2025-02-05T23:00:00.000+00:00 |
| wid-sec-w-2024-1228 | Red Hat OpenStack: Mehrere Schwachstellen | 2024-05-22T22:00:00.000+00:00 | 2025-02-05T23:00:00.000+00:00 |
| wid-sec-w-2024-0581 | Apple iOS und Apple iPadOS: Mehrere Schwachstellen | 2024-03-07T23:00:00.000+00:00 | 2025-02-05T23:00:00.000+00:00 |
| wid-sec-w-2024-0577 | Apple Safari: Mehrere Schwachstellen | 2024-03-07T23:00:00.000+00:00 | 2025-02-05T23:00:00.000+00:00 |
| wid-sec-w-2025-0271 | libyaml: Schwachstelle ermöglicht Denial of Service | 2015-01-28T23:00:00.000+00:00 | 2025-02-04T23:00:00.000+00:00 |
| wid-sec-w-2025-0269 | Linux Kernel: Mehrere Schwachstellen | 2017-08-10T22:00:00.000+00:00 | 2025-02-04T23:00:00.000+00:00 |
| wid-sec-w-2025-0268 | Perl: Schwachstelle ermöglicht Ausführen von beliebigem Programmcode mit Administratorrechten | 2017-11-19T23:00:00.000+00:00 | 2025-02-04T23:00:00.000+00:00 |
| wid-sec-w-2025-0267 | GnuPGP: Schwachstelle ermöglicht Offenlegung von Informationen | 2018-06-13T22:00:00.000+00:00 | 2025-02-04T23:00:00.000+00:00 |
| wid-sec-w-2025-0266 | cURL: Schwachstelle ermöglicht Ausführen von beliebigem Programmcode mit Benutzerrechten | 2018-07-29T22:00:00.000+00:00 | 2025-02-04T23:00:00.000+00:00 |
| wid-sec-w-2025-0264 | HCL BigFix Server Automation: Schwachstelle ermöglicht Denial of Service | 2025-02-04T23:00:00.000+00:00 | 2025-02-04T23:00:00.000+00:00 |
| wid-sec-w-2025-0261 | Aruba ClearPass Policy Manager: Mehrere Schwachstellen | 2025-02-04T23:00:00.000+00:00 | 2025-02-04T23:00:00.000+00:00 |
| wid-sec-w-2025-0258 | Apache Cassandra: Mehrere Schwachstellen. | 2025-02-03T23:00:00.000+00:00 | 2025-02-04T23:00:00.000+00:00 |
| wid-sec-w-2025-0120 | Microsoft Edge: Mehrere Schwachstellen | 2025-01-19T23:00:00.000+00:00 | 2025-02-04T23:00:00.000+00:00 |
| wid-sec-w-2024-3733 | Red Hat Advanced Cluster Management: Mehrere Schwachstellen | 2024-12-18T23:00:00.000+00:00 | 2025-02-04T23:00:00.000+00:00 |
| wid-sec-w-2024-3155 | QEMU: Schwachstelle ermöglicht Privilegieneskalation oder DoS | 2024-10-13T22:00:00.000+00:00 | 2025-02-04T23:00:00.000+00:00 |
| wid-sec-w-2024-1945 | Red Hat Enterprise Linux (libvpx): Mehrere Schwachstellen ermöglichen Denial of Service | 2024-08-28T22:00:00.000+00:00 | 2025-02-04T23:00:00.000+00:00 |
| wid-sec-w-2024-1618 | Checkmk: Mehrere Schwachstellen | 2024-07-15T22:00:00.000+00:00 | 2025-02-04T23:00:00.000+00:00 |
| wid-sec-w-2024-0700 | Microsoft .NET Framework: Schwachstelle ermöglicht Offenlegung von Informationen | 2024-03-24T23:00:00.000+00:00 | 2025-02-04T23:00:00.000+00:00 |
| wid-sec-w-2023-1819 | OpenSSH: Schwachstelle ermöglicht Codeausführung | 2023-07-19T22:00:00.000+00:00 | 2025-02-04T23:00:00.000+00:00 |
| wid-sec-w-2023-1642 | cURL: Schwachstelle ermöglicht Ausführen von beliebigem Programmcode mit Benutzerrechten | 2018-09-04T22:00:00.000+00:00 | 2025-02-04T23:00:00.000+00:00 |
| wid-sec-w-2023-1641 | cURL: Mehrere Schwachstellen | 2018-10-30T23:00:00.000+00:00 | 2025-02-04T23:00:00.000+00:00 |
| wid-sec-w-2023-1640 | cURL: Mehrere Schwachstellen | 2019-02-05T23:00:00.000+00:00 | 2025-02-04T23:00:00.000+00:00 |
| wid-sec-w-2023-1637 | cURL: Mehrere Schwachstellen ermöglichen nicht spezifizierten Angriff | 2019-09-10T22:00:00.000+00:00 | 2025-02-04T23:00:00.000+00:00 |
| wid-sec-w-2023-1015 | Oracle Health Sciences Applications: Mehrere Schwachstellen | 2023-04-18T22:00:00.000+00:00 | 2025-02-04T23:00:00.000+00:00 |
| wid-sec-w-2023-0938 | ntp: Mehrere Schwachstellen | 2023-04-11T22:00:00.000+00:00 | 2025-02-04T23:00:00.000+00:00 |
| wid-sec-w-2022-1243 | RPM: Mehrere Schwachstellen | 2022-08-31T22:00:00.000+00:00 | 2025-02-04T23:00:00.000+00:00 |
| wid-sec-w-2022-1113 | GStreamer: Schwachstelle ermöglicht Denial of Service | 2021-06-09T22:00:00.000+00:00 | 2025-02-04T23:00:00.000+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| rhsa-2020:5599 | Red Hat Security Advisory: web-admin-build security and bug fix update | 2020-12-17T04:28:44+00:00 | 2026-02-28T00:57:00+00:00 |
| rhsa-2020:2641 | Red Hat Security Advisory: grafana security update | 2020-06-22T07:24:02+00:00 | 2026-02-28T00:56:58+00:00 |
| rhsa-2020:2792 | Red Hat Security Advisory: OpenShift Container Platform 4.4.11 grafana-container security update | 2020-07-06T20:11:11+00:00 | 2026-02-28T00:56:55+00:00 |
| rhsa-2020:2676 | Red Hat Security Advisory: grafana security update | 2020-06-23T13:10:02+00:00 | 2026-02-28T00:56:55+00:00 |
| rhsa-2023:7065 | Red Hat Security Advisory: tomcat security and bug fix update | 2023-11-14T15:32:23+00:00 | 2026-02-28T00:56:46+00:00 |
| rhsa-2023:6570 | Red Hat Security Advisory: tomcat security and bug fix update | 2023-11-07T08:49:34+00:00 | 2026-02-28T00:56:46+00:00 |
| rhsa-2023:5533 | Red Hat Security Advisory: nodejs security, bug fix, and enhancement update | 2023-10-09T10:29:45+00:00 | 2026-02-28T00:56:45+00:00 |
| rhsa-2023:4983 | Red Hat Security Advisory: Red Hat Process Automation Manager 7.13.4 security update | 2023-09-05T18:37:03+00:00 | 2026-02-28T00:56:45+00:00 |
| rhsa-2023:4910 | Red Hat Security Advisory: Red Hat JBoss Web Server 5.7.4 release and security update | 2023-09-04T12:24:13+00:00 | 2026-02-28T00:56:44+00:00 |
| rhsa-2023:4909 | Red Hat Security Advisory: Red Hat JBoss Web Server 5.7.4 release and security update | 2023-09-04T12:19:35+00:00 | 2026-02-28T00:56:44+00:00 |
| rhsa-2023:3299 | Red Hat Security Advisory: jenkins and jenkins-2-plugins security update | 2023-05-24T17:13:53+00:00 | 2026-02-28T00:56:43+00:00 |
| rhsa-2023:1953 | Red Hat Security Advisory: Logging Subsystem 5.6.5 - Red Hat OpenShift security update | 2023-04-26T07:58:19+00:00 | 2026-02-28T00:56:39+00:00 |
| rhsa-2023:2100 | Red Hat Security Advisory: Red Hat Integration Camel for Spring Boot 3.20.1 security update | 2023-05-03T14:05:29+00:00 | 2026-02-28T00:56:38+00:00 |
| rhsa-2023:1744 | Red Hat Security Advisory: rh-nodejs14-nodejs security, bug fix, and enhancement update | 2023-04-12T15:10:50+00:00 | 2026-02-28T00:56:35+00:00 |
| rhsa-2022:8913 | Red Hat Security Advisory: Red Hat JBoss Web Server 5.7.1 release and security update | 2022-12-12T12:39:34+00:00 | 2026-02-28T00:56:22+00:00 |
| rhsa-2022:8917 | Red Hat Security Advisory: Red Hat JBoss Web Server 5.7.1 release and security update | 2022-12-12T13:37:10+00:00 | 2026-02-28T00:56:18+00:00 |
| rhsa-2022:8841 | Red Hat Security Advisory: Red Hat JBoss Core Services Apache HTTP Server 2.4.51 SP1 security update | 2022-12-08T13:21:17+00:00 | 2026-02-28T00:56:17+00:00 |
| rhsa-2022:8840 | Red Hat Security Advisory: Red Hat JBoss Core Services Apache HTTP Server 2.4.51 SP1 security update | 2022-12-08T13:08:14+00:00 | 2026-02-28T00:56:17+00:00 |
| rhsa-2022:6224 | Red Hat Security Advisory: openssl security and bug fix update | 2022-08-30T16:07:21+00:00 | 2026-02-28T00:56:16+00:00 |
| rhsa-2022:5818 | Red Hat Security Advisory: openssl security update | 2022-08-03T12:50:24+00:00 | 2026-02-28T00:56:16+00:00 |
| rhsa-2022:5326 | Red Hat Security Advisory: compat-openssl10 security update | 2022-06-30T21:05:00+00:00 | 2026-02-28T00:56:16+00:00 |
| rhsa-2022:4899 | Red Hat Security Advisory: compat-openssl11 security and bug fix update | 2022-06-03T23:04:14+00:00 | 2026-02-28T00:56:16+00:00 |
| rhsa-2022:1520 | Red Hat Security Advisory: Red Hat JBoss Web Server 5.6.2 Security Update | 2022-05-02T11:03:37+00:00 | 2026-02-28T00:56:15+00:00 |
| rhsa-2022:1519 | Red Hat Security Advisory: Red Hat JBoss Web Server 5.6.2 Security Update | 2022-05-02T11:08:07+00:00 | 2026-02-28T00:56:14+00:00 |
| rhsa-2022:1390 | Red Hat Security Advisory: Red Hat JBoss Core Services Apache HTTP Server 2.4.37 SP11 security update | 2022-04-20T19:30:18+00:00 | 2026-02-28T00:56:14+00:00 |
| rhsa-2022:1389 | Red Hat Security Advisory: Red Hat JBoss Core Services Apache HTTP Server 2.4.37 SP11 security update | 2022-04-20T19:44:47+00:00 | 2026-02-28T00:56:13+00:00 |
| rhsa-2022:1112 | Red Hat Security Advisory: openssl security update | 2022-03-29T13:59:33+00:00 | 2026-02-28T00:56:13+00:00 |
| rhsa-2022:1091 | Red Hat Security Advisory: openssl security update | 2022-03-29T07:31:21+00:00 | 2026-02-28T00:56:13+00:00 |
| rhsa-2022:1082 | Red Hat Security Advisory: openssl security update | 2022-03-28T13:53:56+00:00 | 2026-02-28T00:56:13+00:00 |
| rhsa-2022:1078 | Red Hat Security Advisory: openssl security update | 2022-03-28T11:21:15+00:00 | 2026-02-28T00:56:12+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| icsa-21-040-04 | Siemens RUGGEDCOM ROX II | 2021-02-09T00:00:00.000000Z | 2021-02-09T00:00:00.000000Z |
| icsa-21-040-03 | Siemens SINEMA Server & SINEC NMS | 2021-02-09T00:00:00.000000Z | 2021-02-09T00:00:00.000000Z |
| icsa-21-040-02 | Advantech iView | 2021-02-09T00:00:00.000000Z | 2021-02-09T00:00:00.000000Z |
| icsa-21-040-01 | GE Digital HMI/SCADA iFIX | 2021-02-09T00:00:00.000000Z | 2021-02-09T00:00:00.000000Z |
| icsa-20-105-04 | Siemens Climatix (Update A) | 2020-04-14T00:00:00.000000Z | 2021-02-09T00:00:00.000000Z |
| icsa-19-162-04 | Siemens SCALANCE X (Update B) | 2019-06-11T00:00:00.000000Z | 2021-02-09T00:00:00.000000Z |
| icsa-21-035-02 | Horner Automation Cscape | 2021-02-04T00:00:00.000000Z | 2021-02-04T00:00:00.000000Z |
| icsa-21-033-02 | Siemens SIMATIC HMI Comfort Panels & SIMATIC HMI KTP Mobile Panels | 2021-01-28T00:00:00.000000Z | 2021-01-28T00:00:00.000000Z |
| icsa-21-028-01 | Rockwell Automation FactoryTalk Linx and FactoryTalk Services Platform | 2021-01-28T00:00:00.000000Z | 2021-01-28T00:00:00.000000Z |
| icsa-21-026-01 | Fuji Electric Tellus Lite V-Simulator and V-Server Lite | 2021-01-26T00:00:00.000000Z | 2021-01-26T00:00:00.000000Z |
| icsa-21-007-03 | Eaton EASYsoft (Update A) | 2021-01-07T00:00:00.000000Z | 2021-01-26T00:00:00.000000Z |
| icsa-20-353-01 | Treck TCP/IP Stack (Update A) | 2020-12-18T00:00:00.000000Z | 2021-01-26T00:00:00.000000Z |
| icsa-21-021-03 | Honeywell OPC UA Tunneller | 2021-01-21T00:00:00.000000Z | 2021-01-21T00:00:00.000000Z |
| icsa-21-021-02 | Delta Electronics TPEditor | 2021-01-21T00:00:00.000000Z | 2021-01-21T00:00:00.000000Z |
| icsa-21-021-01 | Delta Electronics ISPSoft | 2021-01-21T00:00:00.000000Z | 2021-01-21T00:00:00.000000Z |
| icsma-21-019-01 | Philips Interventional Workstations | 2021-01-19T00:00:00.000000Z | 2021-01-19T00:00:00.000000Z |
| icsa-21-019-02 | Reolink P2P Cameras | 2021-01-19T00:00:00.000000Z | 2021-01-19T00:00:00.000000Z |
| icsa-21-012-04 | Siemens Solid Edge | 2021-01-12T00:00:00.000000Z | 2021-01-15T00:00:00.000000Z |
| icsma-21-012-01 | SOOIL Dana Diabecare RS Products | 2021-01-12T00:00:00.000000Z | 2021-01-12T00:00:00.000000Z |
| icsma-21-007-01 | Innokas Yhtymä Oy Vital Signs Monitor | 2021-01-07T00:00:00.000000Z | 2021-01-07T00:00:00.000000Z |
| icsa-21-007-04 | Delta Electronics CNCSoft-B | 2021-01-07T00:00:00.000000Z | 2021-01-07T00:00:00.000000Z |
| icsa-21-007-02 | Omron CX-One | 2021-01-07T00:00:00.000000Z | 2021-01-07T00:00:00.000000Z |
| icsa-21-007-01 | Hitachi ABB Power Grids FOX615 Multiservice-Multiplexer | 2021-01-07T00:00:00.000000Z | 2021-01-07T00:00:00.000000Z |
| icsa-21-005-06 | Delta Electronics CNCSoft ScreenEditor | 2021-01-05T00:00:00.000000Z | 2021-01-05T00:00:00.000000Z |
| icsa-21-005-05 | Delta Electronics DOPSoft | 2021-01-05T00:00:00.000000Z | 2021-01-05T00:00:00.000000Z |
| icsa-21-005-04 | Red Lion Crimson 3.1 | 2021-01-05T00:00:00.000000Z | 2021-01-05T00:00:00.000000Z |
| icsa-21-005-03 | GE Reason RT43X Clocks | 2021-01-05T00:00:00.000000Z | 2021-01-05T00:00:00.000000Z |
| icsa-21-005-02 | Panasonic FPWIN Pro | 2021-01-05T00:00:00.000000Z | 2021-01-05T00:00:00.000000Z |
| icsa-21-005-01 | Schneider Electric Web Server on Modicon M340 | 2021-01-05T00:00:00.000000Z | 2021-01-05T00:00:00.000000Z |
| icsa-20-352-02 | PTC Kepware KEPServerEX (Update A) | 2020-12-17T00:00:00.000000Z | 2021-01-05T00:00:00.000000Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| cisco-sa-rv-routers-injection-twc7krkq | Cisco Small Business RV110W, RV130, RV130W, and RV215W Series Routers Management Interface Vulnerabilities | 2020-06-17T16:00:00+00:00 | 2020-06-17T16:00:00+00:00 |
| cisco-sa-rv-routers-injection-tWC7krKQ | Cisco Small Business RV110W, RV130, RV130W, and RV215W Series Routers Management Interface Vulnerabilities | 2020-06-17T16:00:00+00:00 | 2020-06-17T16:00:00+00:00 |
| cisco-sa-on-prem-access-ctrl-fpqrfdpf | Cisco Smart Software Manager On-Prem Improper Access Control Vulnerability | 2020-06-17T16:00:00+00:00 | 2020-06-17T16:00:00+00:00 |
| cisco-sa-on-prem-access-ctrl-fpQRfdpf | Cisco Smart Software Manager On-Prem Improper Access Control Vulnerability | 2020-06-17T16:00:00+00:00 | 2020-06-17T16:00:00+00:00 |
| cisco-sa-nso-info-disclosure-wdnvbtnq | Cisco Network Services Orchestrator Information Disclosure Vulnerability | 2020-06-17T16:00:00+00:00 | 2020-06-17T16:00:00+00:00 |
| cisco-sa-nso-info-disclosure-WdNvBTNq | Cisco Network Services Orchestrator Information Disclosure Vulnerability | 2020-06-17T16:00:00+00:00 | 2020-06-17T16:00:00+00:00 |
| cisco-sa-nfvis-ptrav-shmzzwvr | Cisco Enterprise NFV Infrastructure Software Path Traversal Vulnerability | 2020-06-17T16:00:00+00:00 | 2020-06-17T16:00:00+00:00 |
| cisco-sa-nfvis-ptrav-SHMzzwVR | Cisco Enterprise NFV Infrastructure Software Path Traversal Vulnerability | 2020-06-17T16:00:00+00:00 | 2020-06-17T16:00:00+00:00 |
| cisco-sa-famp-zepdxy | Cisco AMP for Endpoints and ClamAV Privilege Escalation Vulnerability | 2020-06-17T16:00:00+00:00 | 2020-06-17T16:00:00+00:00 |
| cisco-sa-famp-ZEpdXy | Cisco AMP for Endpoints and ClamAV Privilege Escalation Vulnerability | 2020-06-17T16:00:00+00:00 | 2020-06-17T16:00:00+00:00 |
| cisco-sa-esa-url-bypass-wo4bz75s | Cisco Email Security Appliance URL Filtering Bypass Vulnerability | 2020-06-17T16:00:00+00:00 | 2020-06-17T16:00:00+00:00 |
| cisco-sa-esa-url-bypass-WO4BZ75s | Cisco Email Security Appliance URL Filtering Bypass Vulnerability | 2020-06-17T16:00:00+00:00 | 2020-06-17T16:00:00+00:00 |
| cisco-sa-dcnm-stored-xss-yjyqbjgu | Cisco Data Center Network Manager Stored Cross-Site Scripting Vulnerability | 2020-06-17T16:00:00+00:00 | 2020-06-17T16:00:00+00:00 |
| cisco-sa-dcnm-stored-xss-yJyqBJGU | Cisco Data Center Network Manager Stored Cross-Site Scripting Vulnerability | 2020-06-17T16:00:00+00:00 | 2020-06-17T16:00:00+00:00 |
| cisco-sa-dcnm-stored-xss-vye4bnah | Cisco Data Center Network Manager Stored Cross-Site Scripting Vulnerability | 2020-06-17T16:00:00+00:00 | 2020-06-17T16:00:00+00:00 |
| cisco-sa-dcnm-stored-xss-euygpqxm | Cisco Data Center Network Manager Stored Cross-Site Scripting Vulnerability | 2020-06-17T16:00:00+00:00 | 2020-06-17T16:00:00+00:00 |
| cisco-sa-dcnm-stored-xss-eUyGPqxm | Cisco Data Center Network Manager Stored Cross-Site Scripting Vulnerability | 2020-06-17T16:00:00+00:00 | 2020-06-17T16:00:00+00:00 |
| cisco-sa-dcnm-stored-xss-VyE4bNAh | Cisco Data Center Network Manager Stored Cross-Site Scripting Vulnerability | 2020-06-17T16:00:00+00:00 | 2020-06-17T16:00:00+00:00 |
| cisco-sa-asr5k-ecs-bypass-2lqfpcl | Cisco ASR 5000 Series Aggregation Services Routers Enhanced Charging Service Rule Bypass Vulnerability | 2020-06-17T16:00:00+00:00 | 2020-06-17T16:00:00+00:00 |
| cisco-sa-asr5k-ecs-bypass-2LqfPCL | Cisco ASR 5000 Series Aggregation Services Routers Enhanced Charging Service Rule Bypass Vulnerability | 2020-06-17T16:00:00+00:00 | 2020-06-17T16:00:00+00:00 |
| cisco-sa-salt-2vx545ag | SaltStack FrameWork Vulnerabilities Affecting Cisco Products | 2020-05-28T16:00:00+00:00 | 2020-06-16T15:17:35+00:00 |
| cisco-sa-salt-2vx545AG | SaltStack FrameWork Vulnerabilities Affecting Cisco Products | 2020-05-28T16:00:00+00:00 | 2020-06-16T15:17:35+00:00 |
| cisco-sa-tcl-dos-mazqunmf | Cisco IOS and IOS XE Software Tcl Denial of Service Vulnerability | 2020-06-03T16:00:00+00:00 | 2020-06-08T20:41:10+00:00 |
| cisco-sa-tcl-dos-MAZQUnMF | Cisco IOS and IOS XE Software Tcl Denial of Service Vulnerability | 2020-06-03T16:00:00+00:00 | 2020-06-08T20:41:10+00:00 |
| cisco-sa-20191002-pi-xss-12713 | Cisco Prime Infrastructure Cross-Site Scripting Vulnerability | 2019-10-02T16:00:00+00:00 | 2020-06-08T20:15:05+00:00 |
| cisco-sa-webui-unauthprxy-kxxsbwh | Cisco IOS XE Software Web UI Unauthenticated Proxy Service Vulnerability | 2020-06-03T16:00:00+00:00 | 2020-06-03T16:00:00+00:00 |
| cisco-sa-webui-unauthprxy-KXXsbWh | Cisco IOS XE Software Web UI Unauthenticated Proxy Service Vulnerability | 2020-06-03T16:00:00+00:00 | 2020-06-03T16:00:00+00:00 |
| cisco-sa-webui-pzgqxjfg | Cisco IOS XE Software Web UI Privilege Escalation Vulnerability | 2020-06-03T16:00:00+00:00 | 2020-06-03T16:00:00+00:00 |
| cisco-sa-webui-filerd-hngndygk | Cisco IOS XE Software Web UI Arbitrary File Read Vulnerability | 2020-06-03T16:00:00+00:00 | 2020-06-03T16:00:00+00:00 |
| cisco-sa-webui-filerd-HngnDYGk | Cisco IOS XE Software Web UI Arbitrary File Read Vulnerability | 2020-06-03T16:00:00+00:00 | 2020-06-03T16:00:00+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| msrc_cve-2025-68742 | bpf: Fix invalid prog->stats access when update_effective_progs fails | 2025-12-02T00:00:00.000Z | 2026-02-18T02:30:39.000Z |
| msrc_cve-2024-35801 | x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD | 2024-05-02T07:00:00.000Z | 2026-02-18T02:30:36.000Z |
| msrc_cve-2023-39318 | Improper handling of HTML-like comments in script contexts in html/template | 2023-09-01T00:00:00.000Z | 2026-02-18T02:30:29.000Z |
| msrc_cve-2024-50019 | kthread: unpark only parked kthread | 2024-10-01T07:00:00.000Z | 2026-02-18T02:30:21.000Z |
| msrc_cve-2025-21922 | ppp: Fix KMSAN uninit-value warning with bpf | 2025-04-02T00:00:00.000Z | 2026-02-18T02:30:15.000Z |
| msrc_cve-2024-6608 | It was possible to move the cursor using pointerlock from an iframe. This allowed moving the cursor outside of the viewport and the Firefox window. This vulnerability affects Firefox < 128 and Thunderbird < 128. | 2024-07-01T07:00:00.000Z | 2026-02-18T02:30:11.000Z |
| msrc_cve-2024-45590 | body-parser vulnerable to denial of service when url encoding is enabled | 2024-09-01T07:00:00.000Z | 2026-02-18T02:30:01.000Z |
| msrc_cve-2025-37755 | net: libwx: handle page_pool_dev_alloc_pages error | 2025-05-02T00:00:00.000Z | 2026-02-18T02:29:56.000Z |
| msrc_cve-2024-9042 | This CVE affects only Windows worker nodes. Your worker node is vulnerable to this issue if it is running one of the affected versions listed below. | 2025-03-02T00:00:00.000Z | 2026-02-18T02:29:50.000Z |
| msrc_cve-2025-68356 | gfs2: Prevent recursive memory reclaim | 2025-12-02T00:00:00.000Z | 2026-02-18T02:29:44.000Z |
| msrc_cve-2019-14249 | dwarf_elf_load_headers.c in libdwarf before 2019-07-05 allows attackers to cause a denial of service | 2019-07-02T00:00:00.000Z | 2026-02-18T02:29:41.000Z |
| msrc_cve-2025-38083 | net_sched: prio: fix a race in prio_tune() | 2025-06-02T00:00:00.000Z | 2026-02-18T02:29:40.000Z |
| msrc_cve-2024-50039 | net/sched: accept TCA_STAB only for root qdisc | 2024-10-01T07:00:00.000Z | 2026-02-18T02:29:15.000Z |
| msrc_cve-2025-37793 | ASoC: Intel: avs: Fix null-ptr-deref in avs_component_probe() | 2025-05-02T00:00:00.000Z | 2026-02-18T02:29:11.000Z |
| msrc_cve-2025-21949 | LoongArch: Set hugetlb mmap base address aligned with pmd size | 2025-04-02T00:00:00.000Z | 2026-02-18T02:29:10.000Z |
| msrc_cve-2025-21857 | net/sched: cls_api: fix error handling causing NULL dereference | 2025-03-02T00:00:00.000Z | 2026-02-18T02:29:04.000Z |
| msrc_cve-2025-68746 | spi: tegra210-quad: Fix timeout handling | 2025-12-02T00:00:00.000Z | 2026-02-18T02:29:02.000Z |
| msrc_cve-2025-39707 | drm/amdgpu: check if hubbub is NULL in debugfs/amdgpu_dm_capabilities | 2025-09-02T00:00:00.000Z | 2026-02-18T02:29:02.000Z |
| msrc_cve-2020-28163 | libdwarf before 20201201 allows a dwarf_print_lines.c NULL pointer dereference and application crash via a DWARF5 line-table header that has an invalid FORM for a pathname. | 2023-04-01T00:00:00.000Z | 2026-02-18T02:29:02.000Z |
| msrc_cve-2025-20260 | ClamAV PDF Scanning Buffer Overflow Vulnerability | 2025-06-02T00:00:00.000Z | 2026-02-18T02:28:55.000Z |
| msrc_cve-2025-54566 | hw/pci/pcie_sriov.c in QEMU through 10.0.3 has a migration state inconsistency, a related issue to CVE-2024-26327. | 2025-07-02T00:00:00.000Z | 2026-02-18T02:28:48.000Z |
| msrc_cve-2025-58187 | Quadratic complexity when checking name constraints in crypto/x509 | 2025-10-02T00:00:00.000Z | 2026-02-18T02:28:39.000Z |
| msrc_cve-2025-21928 | HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() | 2025-04-02T00:00:00.000Z | 2026-02-18T02:28:34.000Z |
| msrc_cve-2024-43800 | serve-static affected by template injection that can lead to XSS | 2024-09-01T07:00:00.000Z | 2026-02-18T02:28:33.000Z |
| msrc_cve-2024-35853 | mlxsw: spectrum_acl_tcam: Fix memory leak during rehash | 2024-05-02T07:00:00.000Z | 2026-02-18T02:28:33.000Z |
| msrc_cve-2025-22025 | nfsd: put dl_stid if fail to queue dl_recall | 2025-04-02T00:00:00.000Z | 2026-02-18T02:28:24.000Z |
| msrc_cve-2025-21854 | sockmap, vsock: For connectible sockets allow only connected | 2025-03-02T00:00:00.000Z | 2026-02-18T02:28:24.000Z |
| msrc_cve-2020-27545 | libdwarf before 20201017 has a one-byte out-of-bounds read because of an invalid pointer dereference via an invalid line table in a crafted object. | 2023-04-01T00:00:00.000Z | 2026-02-18T02:28:19.000Z |
| msrc_cve-2024-49922 | drm/amd/display: Check null pointers before using them | 2024-10-01T07:00:00.000Z | 2026-02-18T02:28:11.000Z |
| msrc_cve-2025-68347 | ALSA: firewire-motu: fix buffer overflow in hwdep read for DSP events | 2025-12-02T00:00:00.000Z | 2026-02-18T02:27:52.000Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| opensuse-su-2024:13700-1 | indent-2.2.13-3.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13699-1 | apache2-mod_auth_openidc-2.4.15.3-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13698-1 | corepack21-21.6.2-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13697-1 | corepack20-20.11.1-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13696-1 | kernel-devel-6.7.5-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13695-1 | expat-2.6.0-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13694-1 | wpa_supplicant-2.10-6.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13693-1 | tomcat10-10.1.18-3.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13692-1 | tomcat-9.0.85-3.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13691-1 | python310-aiohttp-3.9.3-2.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13690-1 | libQt5Bootstrap-devel-static-32bit-5.15.12+kde151-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13689-1 | docker-24.0.7_ce-3.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13688-1 | buildkit-0.12.5-2.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13687-1 | bind-9.18.24-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13686-1 | python310-FontTools-4.47.2-2.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13685-1 | hugin-2023.0.0-2.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13684-1 | python310-fastapi-0.109.1-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13683-1 | libIex-3_1-30-32bit-3.1.11-1.3 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13682-1 | python310-uamqp-1.6.8-2.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13681-1 | php-composer2-2.7.1-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13680-1 | pdns-recursor-5.0.2-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13679-1 | java-1_8_0-openj9-1.8.0.402-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13678-1 | java-17-openj9-17.0.10.0-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13677-1 | java-11-openj9-11.0.22.0-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13676-1 | libxml2-2-2.11.6-2.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13675-1 | libgit2-1_7-1.7.2-2.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13674-1 | python310-oletools-0.60.1-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13673-1 | python310-Django-4.2.10-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13672-1 | libecpg6-16.2-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13671-1 | postgresql15-15.6-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| osv-2020-2063 | Heap-buffer-overflow in WelsDec::WelsDecodeMbCavlcBSlice | 2020-10-14T00:00:24.741197Z | 2022-04-13T03:04:37.451970Z |
| osv-2020-2062 | Heap-buffer-overflow in WelsDec::WelsDecodeMbCabacISliceBaseMode0 | 2020-10-14T00:00:21.127546Z | 2022-04-13T03:04:37.362017Z |
| osv-2020-2061 | Heap-buffer-overflow in WelsDec::WelsCheckAndRecoverForFutureDecoding | 2020-10-14T00:00:12.592572Z | 2022-04-13T03:04:37.584682Z |
| osv-2020-2045 | Use-of-uninitialized-value in WelsDec::GetColocatedMb | 2020-10-13T00:00:35.800515Z | 2022-04-13T03:04:37.615819Z |
| osv-2020-2007 | Heap-buffer-overflow in WelsDec::WelsCheckAndRecoverForFutureDecoding | 2020-10-10T00:00:11.992505Z | 2022-04-13T03:04:37.409264Z |
| osv-2020-2002 | Heap-buffer-overflow in McChromaWithFragMv_c | 2020-10-09T00:00:14.875449Z | 2022-04-13T03:04:37.483499Z |
| osv-2020-1899 | Heap-buffer-overflow in DeblockChromaLt42_c | 2020-10-02T00:00:16.147200Z | 2022-04-13T03:04:37.367249Z |
| osv-2020-1898 | Heap-buffer-overflow in WelsDec::UpdateP16x16RefIdx | 2020-10-02T00:00:14.116993Z | 2022-04-13T03:04:37.589868Z |
| osv-2020-189 | Stack-buffer-overflow in tvb_get_ipv4_addr_with_prefix_len | 2020-06-24T01:51:18.143719Z | 2022-04-13T03:04:37.791677Z |
| osv-2020-1857 | Heap-buffer-overflow in WelsDec::WelsDecodeMbCabacPSlice | 2020-09-27T00:00:31.349697Z | 2022-04-13T03:04:37.552805Z |
| osv-2020-1855 | Heap-buffer-overflow in WelsDec::UpdateP16x16MotionInfo | 2020-09-27T00:00:13.048083Z | 2022-04-13T03:04:37.673448Z |
| osv-2020-1854 | Use-of-uninitialized-value in UpdateDecStatNoFreezingInfo | 2020-09-27T00:00:12.495058Z | 2022-04-13T03:04:37.382630Z |
| osv-2020-1853 | Heap-buffer-overflow in WelsDec::DoErrorConSliceCopy | 2020-09-26T00:00:40.938708Z | 2022-04-13T03:04:37.516032Z |
| osv-2020-1852 | UNKNOWN READ in WelsCommon::WelsFree | 2020-09-26T00:00:38.959174Z | 2022-04-13T03:04:37.600365Z |
| osv-2020-1847 | Heap-buffer-overflow in WelsDec::NeedErrorCon | 2020-09-26T00:00:10.167059Z | 2022-04-13T03:04:37.657743Z |
| osv-2020-1809 | UNKNOWN WRITE in Imf_2_5::copyIntoFrameBuffer | 2020-09-19T00:00:09.405373Z | 2022-04-13T03:04:37.067494Z |
| osv-2020-173 | Use-of-uninitialized-value in BaseCryptStream::BaseCryptStream | 2020-06-24T01:51:17.351460Z | 2022-04-13T03:04:37.242270Z |
| osv-2020-1664 | Negative-size-param in BaseMemStream<char const>::getChars | 2020-08-27T00:00:08.371618Z | 2022-04-13T03:04:37.336851Z |
| osv-2020-150 | Segv on unknown address in std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<ch | 2020-06-24T01:51:16.354141Z | 2022-04-13T03:04:37.943567Z |
| osv-2020-15 | UNKNOWN READ in _01inverse | 2020-06-24T01:51:10.221987Z | 2022-04-13T03:04:37.710615Z |
| osv-2020-1340 | Use-of-uninitialized-value in Gfx::fillPatch | 2020-07-22T21:50:07.878108Z | 2022-04-13T03:04:37.268795Z |
| osv-2020-1312 | Use-of-uninitialized-value in FilterInput8bitWithStride_c | 2020-07-22T21:50:05.402144Z | 2022-04-13T03:04:37.494474Z |
| osv-2020-1296 | Heap-use-after-free in WelsDec::WelsReorderRefList | 2020-07-22T21:50:04.064679Z | 2022-04-13T03:04:37.678756Z |
| osv-2020-1289 | Heap-use-after-free in WelsDec::MapColToList0 | 2020-07-22T21:50:03.268821Z | 2022-04-13T03:04:37.441439Z |
| osv-2020-1264 | Use-of-uninitialized-value in AnnotAppearanceBuilder::drawText | 2020-07-22T21:50:01.559473Z | 2022-04-13T03:04:37.301038Z |
| osv-2020-1258 | Heap-use-after-free in WelsDec::MapColToList0 | 2020-07-22T21:50:00.916036Z | 2022-04-13T03:04:37.430754Z |
| osv-2020-1250 | Heap-use-after-free in WelsDec::MapColToList0 | 2020-07-22T21:50:00.192005Z | 2022-04-13T03:04:37.642190Z |
| osv-2020-1220 | Heap-use-after-free in WelsDec::WelsReorderRefList | 2020-07-22T21:49:57.865682Z | 2022-04-13T03:04:37.462411Z |
| osv-2020-1186 | Index-out-of-bounds in WelsDec::DecodeCurrentAccessUnit | 2020-07-22T21:49:54.494323Z | 2022-04-13T03:04:37.488799Z |
| osv-2020-1172 | Global-buffer-overflow in WelsDec::ParseInterBInfo | 2020-07-22T21:49:53.034421Z | 2022-04-13T03:04:37.467751Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| bit-envoy-2021-32777 | Incorrect concatenation of multiple value request headers in ext-authz extension | 2024-03-06T10:58:27.361Z | 2025-05-20T10:02:07.006Z |
| bit-envoy-2021-29492 | Bypass of path matching rules using escaped slash characters | 2024-03-06T10:58:39.469Z | 2025-05-20T10:02:07.006Z |
| bit-envoy-2021-21378 | JWT authentication bypass with unknown issuer token | 2024-03-06T10:59:25.814Z | 2025-05-20T10:02:07.006Z |
| bit-envoy-2020-15104 | TLS Validation Vulnerability in Envoy | 2024-03-06T11:00:31.369Z | 2025-05-20T10:02:07.006Z |
| bit-elk-2025-25016 | Kibana Unrestricted Upload of File | 2025-05-03T05:39:08.441Z | 2025-05-20T10:02:07.006Z |
| bit-elk-2025-25015 | Kibana arbitrary code execution via prototype pollution | 2025-03-07T20:52:06.865Z | 2025-05-20T10:02:07.006Z |
| bit-elk-2024-52972 | Kibana allocation of resources without limits or throttling leads to crash | 2025-01-27T07:09:41.033Z | 2025-05-20T10:02:07.006Z |
| bit-elk-2024-43710 | Kibana server-side request forgery | 2025-01-27T07:09:48.425Z | 2025-05-20T10:02:07.006Z |
| bit-elk-2024-37281 | Kibana Denial of Service issue | 2024-08-01T07:17:29.618Z | 2025-05-20T10:02:07.006Z |
| bit-elk-2024-37279 | Kibana Broken Access Control issue | 2024-06-17T07:17:38.239Z | 2025-05-20T10:02:07.006Z |
| bit-elk-2024-23442 | Kibana open redirect issue | 2024-06-18T07:17:33.634Z | 2025-05-20T10:02:07.006Z |
| bit-elk-2024-11390 | Kibana Unrestricted Upload of File with Dangerous Type Can Lead to XSS | 2025-05-03T05:37:15.652Z | 2025-05-20T10:02:07.006Z |
| bit-elasticsearch-2024-52980 | Elasticsearch Uncontrolled Resource Consumption vulnerability | 2025-04-10T07:10:13.338Z | 2025-05-20T10:02:07.006Z |
| bit-elasticsearch-2024-43709 | Elasticsearch allocation of resources without limits or throttling leads to crash | 2025-02-01T07:09:48.913Z | 2025-05-20T10:02:07.006Z |
| bit-elasticsearch-2024-37280 | Elasticsearch StackOverflow vulnerability | 2024-06-17T07:17:36.635Z | 2025-05-20T10:02:07.006Z |
| bit-elasticsearch-2024-23451 | Elasticsearch Incorrect Authorization in the Remote Cluster Security API key based security model | 2024-05-14T07:16:58.593Z | 2025-05-20T10:02:07.006Z |
| bit-elasticsearch-2024-23450 | Elasticsearch Uncontrolled Resource Consumption vulnerability | 2024-05-14T07:17:11.184Z | 2025-05-20T10:02:07.006Z |
| bit-elasticsearch-2024-23449 | Elasticsearch Uncaught Exception | 2024-05-14T07:17:25.293Z | 2025-05-20T10:02:07.006Z |
| bit-elasticsearch-2024-23445 | Elasticsearch Remote Cluster Search Cross Cluster API Key insufficient restrictions | 2024-06-17T07:18:35.231Z | 2025-05-20T10:02:07.006Z |
| bit-elasticsearch-2024-23444 | Elasticsearch elasticsearch-certutil csr fails to encrypt private key | 2024-08-02T07:18:37.023Z | 2025-05-20T10:02:07.006Z |
| bit-elasticsearch-2024-12539 | Elasticsearch Incorrect Authorization | 2024-12-19T07:08:44.980Z | 2025-05-20T10:02:07.006Z |
| bit-elasticsearch-2023-46674 | Elasticsearch-hadoop Unsafe Deserialization | 2024-03-06T10:51:29.796Z | 2025-05-20T10:02:07.006Z |
| bit-elasticsearch-2023-31419 | Elasticsearch StackOverflow vulnerability | 2024-03-06T10:51:47.965Z | 2025-05-20T10:02:07.006Z |
| bit-elasticsearch-2023-31418 | Elasticsearch uncontrolled resource consumption | 2024-03-06T10:51:58.187Z | 2025-05-20T10:02:07.006Z |
| bit-elasticsearch-2023-31417 | Elasticsearch Insertion of sensitive information in audit logs | 2024-03-06T10:52:07.793Z | 2025-05-20T10:02:07.006Z |
| bit-elasticsearch-2021-37937 | Elasticsearch privilege escalation | 2024-03-06T10:52:41.376Z | 2025-05-20T10:02:07.006Z |
| bit-drupal-2025-31674 | Drupal core - Moderately critical - Gadget Chain - SA-CORE-2025-003 | 2025-05-02T05:46:04.051Z | 2025-05-20T10:02:07.006Z |
| bit-drupal-2025-3057 | Drupal core - Critical - Cross site scripting - SA-CORE-2025-001 | 2025-04-16T07:17:43.264Z | 2025-05-20T10:02:07.006Z |
| bit-drupal-2023-5256 | Drupal core - Critical - Cache poisoning - SA-CORE-2023-006 | 2024-03-06T10:51:30.695Z | 2025-05-20T10:02:07.006Z |
| bit-drupal-2023-31250 | Drupal core - Moderately critical - Access bypass - SA-CORE-2023-005 | 2024-03-06T10:51:40.782Z | 2025-05-20T10:02:07.006Z |
| ID | Description | Updated |
|---|---|---|
| var-202402-1471 | Transient DOS in Audio when invoking callback function of ASM driver. AQT1000 firmware, A… | 2024-02-15T22:56:43.227000Z |
| var-202402-1489 | Implicit intent hijacking vulnerability in VoiceSearch of Galaxy Store prior to version 4… | 2024-02-15T22:52:40.576000Z |
| var-202402-1488 | Implicit intent hijacking vulnerability in SamsungAccount of Galaxy Store prior to versio… | 2024-02-15T19:09:43.974000Z |
| var-202106-1773 | D-Link DIR-2640-US 1.01B04 is vulnerable to Incorrect Access Control. Router ac2600 (dir-… | 2024-02-14T23:10:49.539000Z |
| var-201311-0339 | jsdm/ajax/port.php in J-Web in Juniper Junos before 10.4R13, 11.4 before 11.4R7, 12.1 bef… | 2024-02-14T23:10:01.500000Z |
| var-201801-1518 | diag_ping.cmd on D-Link DSL-2640U devices with firmware IM_1.00 and ME_1.00, and DSL-2540… | 2024-02-14T23:09:39.817000Z |
| var-200607-0468 | Siemens SpeedStream 2624 allows remote attackers to cause a denial of service (device han… | 2024-02-14T23:09:27.252000Z |
| var-200605-0266 | Sitecom WL-153 router firmware before 1.38 allows remote attackers to bypass access restr… | 2024-02-14T23:09:27.582000Z |
| var-201705-3686 | On Franklin Fueling Systems TS-550 evo 2.3.0.7332 devices, the roleDiag user, which can b… | 2024-02-14T23:09:18.558000Z |
| var-202207-0880 | A buffer overflow in the httpd daemon on TP-Link TL-WR841N V12 (firmware version 3.16.9) … | 2024-02-14T23:09:13.772000Z |
| var-201803-1342 | Bose SoundTouch devices allow XSS via crafted song data from a music service, as demonstr… | 2024-02-14T23:08:52.205000Z |
| var-202402-1418 | Memory corruption in Audio while calling START command on host voice PCM multiple times f… | 2024-02-14T23:08:42.198000Z |
| var-200605-0265 | Linksys WRT54G Wireless-G Broadband Router allows remote attackers to bypass access restr… | 2024-02-14T23:08:40.203000Z |
| var-201702-0485 | An issue was discovered on SendQuick Entera and Avera devices before 2HF16. Multiple Comm… | 2024-02-14T23:07:12.955000Z |
| var-200212-0099 | sql_layer.php in PHP-Nuke 5.4 and earlier does not restrict access to debugging features,… | 2024-02-14T23:07:01.561000Z |
| var-200609-0071 | Multiple unspecified vulnerabilities in SnapGear before 3.1.4u1 allow remote attackers to… | 2024-02-14T23:06:59.409000Z |
| var-200605-0268 | ZyXEL P-335WT router allows remote attackers to bypass access restrictions and conduct un… | 2024-02-14T23:06:59.761000Z |
| var-202205-1841 | D-Link DSL-G2452DG HW:T1\\tFW:ME_2.00 was discovered to contain insecure permissions. of … | 2024-02-14T23:06:04.024000Z |
| var-202206-0222 | TOTOLINK EX1200T V4.1.2cu.5215 contains a remote command injection vulnerability in the f… | 2024-02-14T23:06:03.964000Z |
| var-200512-0471 | SAPID CMS before 1.2.3.03 allows remote attackers to bypass authentication via direct req… | 2024-02-14T23:05:59.598000Z |
| var-202112-0695 | An HTTP request smuggling attack in TP-Link AX10v1 before v1_211117 allows a remote unaut… | 2024-02-14T23:05:13.446000Z |
| var-202110-1437 | Several web interfaces in D-Link DIR-868LW 1.12b have no authentication requirements for … | 2024-02-14T23:05:13.616000Z |
| var-202401-1419 | A vulnerability exists in Rockwell Automation FactoryTalk® Service Platform that allows … | 2024-02-14T23:05:10.292000Z |
| var-202206-0381 | TOTOLINK EX1200T V4.1.2cu.5215 contains a denial of service vulnerability in function Reb… | 2024-02-14T23:01:52.113000Z |
| var-202402-1427 | Information disclosure in Audio while accessing AVCS services from ADSP payload. AQT1000 … | 2024-02-14T23:01:45.028000Z |
| var-200703-0036 | SnapGear 560, 585, 580, 640, 710, and 720 appliances before the 3.1.4u5 firmware allow re… | 2024-02-14T23:01:39.421000Z |
| var-200901-0055 | The Advantech ADAM-6000 module has 00000000 as its default password, which makes it easie… | 2024-02-14T23:01:36.198000Z |
| var-201402-0420 | Cross-site scripting (XSS) vulnerability in vTiger CRM 5.4.0 allows remote attackers to i… | 2024-02-14T23:01:32.535000Z |
| var-201709-0895 | Intelbras WRN 150 devices allow remote attackers to read the configuration file, and cons… | 2024-02-14T23:00:01.722000Z |
| var-202106-1771 | D-Link DIR-2640-US 1.01B04 is vulnerable to Buffer Overflow. There are multiple out-of-bo… | 2024-02-14T22:59:53.850000Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| jvndb-2008-000060 | Kantan WEB Server cross-site scripting vulnerability | 2008-09-22T12:26+09:00 | 2008-09-22T12:26+09:00 |
| jvndb-2008-000059 | Kantan WEB Server directory traversal vulnerability | 2008-09-22T12:26+09:00 | 2008-09-22T12:26+09:00 |
| jvndb-2008-000058 | Multiple Tor World CGI scripts vulnerable to arbitrary script execution | 2008-09-18T11:48+09:00 | 2008-09-18T11:48+09:00 |
| jvndb-2008-000057 | Sound Master 2nd from High Norm vulnerable to cross-site scripting | 2008-09-10T11:28+09:00 | 2008-09-10T11:28+09:00 |
| jvndb-2008-000056 | Movable Type vulnerable to cross-site scripting | 2008-09-10T11:28+09:00 | 2008-09-10T11:28+09:00 |
| jvndb-2008-001614 | JP1/NETM/DM SubManager and JP1/NETM/DM Client Process Termination Vulnerability | 2008-09-09T16:21+09:00 | 2008-09-09T16:21+09:00 |
| jvndb-2008-001613 | Fujitsu Interstage Application Server Access Control Update Problem | 2008-09-09T16:21+09:00 | 2008-09-09T16:21+09:00 |
| jvndb-2008-000052 | Webservice-DIC shop_v50 and shop_v52 vulnerable to cross-site scripting | 2008-09-08T17:01+09:00 | 2008-09-08T17:01+09:00 |
| jvndb-2008-001585 | Hitachi JP1/File Transmission Server/FTP Unauthorized File Permission Change Vulnerability | 2008-09-05T12:24+09:00 | 2008-09-05T12:24+09:00 |
| jvndb-2008-001584 | Hitachi JP1/File Transmission Server/FTP Transmission Failure Problem | 2008-09-05T12:23+09:00 | 2008-09-05T12:23+09:00 |
| jvndb-2008-001575 | Fujitsu Interstage Application Server Single Sign-On Buffer Overflow Vulnerability | 2008-09-03T12:33+09:00 | 2008-09-03T12:33+09:00 |
| jvndb-2008-000055 | Blogn vulnerable to cross-site scripting | 2008-09-02T17:22+09:00 | 2008-09-02T17:22+09:00 |
| jvndb-2008-000054 | Blogn vulnerable to cross-site request forgery | 2008-09-02T17:22+09:00 | 2008-09-02T17:22+09:00 |
| jvndb-2008-000053 | mysql-lists from AquaGardenSoft Co.,Ltd. vulnerable to cross-site scripting | 2008-09-02T17:05+09:00 | 2008-09-02T17:05+09:00 |
| jvndb-2008-000049 | Vulnerability in La!cooda WIZ and LacoodaST allowing an arbitrary PHP script execution | 2008-09-02T17:03+09:00 | 2008-09-02T17:03+09:00 |
| jvndb-2008-000048 | La!cooda WIZ and LacoodaST vulnerable to cross-site scripting | 2008-09-02T17:02+09:00 | 2008-09-02T17:02+09:00 |
| jvndb-2008-000047 | LacoodaST from SpaceTag, Inc. session fixation vulnerability | 2008-09-02T17:01+09:00 | 2008-09-02T17:01+09:00 |
| jvndb-2008-000046 | La!cooda WIZ and LacoodaST vulnerable to cross-site request forgery | 2008-09-02T16:58+09:00 | 2008-09-02T16:58+09:00 |
| jvndb-2008-000050 | Virus Security and Virus Security ZERO denial of service (DoS) vulnerability | 2008-08-14T18:15+09:00 | 2008-08-14T18:15+09:00 |
| jvndb-2008-000037 | Multiple Panasonic Communications Co., Ltd. network cameras vulnerable to cross-site scripting | 2008-08-04T14:34+09:00 | 2008-08-04T14:34+09:00 |
| jvndb-2008-001514 | Cross-Site Scripting Vulnerability in Hitachi Collaboration - Online Community Management | 2008-07-30T13:46+09:00 | 2008-07-30T13:46+09:00 |
| jvndb-2008-000045 | Geeklog Forum Plugin vulnerable to cross-site scripting | 2008-07-29T14:57+09:00 | 2008-07-29T14:57+09:00 |
| jvndb-2008-000044 | K's CGI Access Log Kaiseki (Jcode.pm) vulnerable to cross-site scripting | 2008-07-29T14:56+09:00 | 2008-07-29T14:56+09:00 |
| jvndb-2008-000043 | K's CGI Access Log Kaiseki (jcode.pl) vulnerable to cross-site scripting | 2008-07-29T14:56+09:00 | 2008-07-29T14:56+09:00 |
| jvndb-2008-000021 | Mozilla Firefox cross-site scripting vulnerability | 2008-05-21T00:00+09:00 | 2008-07-29T14:54+09:00 |
| jvndb-2008-000042 | Multiple Century Systems routers vulnerable to cross-site request forgery | 2008-07-24T14:23+09:00 | 2008-07-24T14:23+09:00 |
| jvndb-2008-000041 | WebProxy from LunarNight Laboratory vulnerable to cross-site scripting | 2008-07-24T14:23+09:00 | 2008-07-24T14:23+09:00 |
| jvndb-2008-000040 | Directory traversal vulnerability in WebLogic Server and WebLogic Express plug-ins | 2008-07-24T14:22+09:00 | 2008-07-24T14:22+09:00 |
| jvndb-2008-000039 | Safari installed in iPod touch and iPhone vulnerable in handling server certificates | 2008-07-16T12:27+09:00 | 2008-07-16T12:27+09:00 |
| jvndb-2007-000457 | Apache Tomcat cross-site scripting vulnerability | 2008-05-21T00:00+09:00 | 2008-07-11T13:48+09:00 |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| suse-su-2025:01631-1 | Security update for s390-tools | 2025-05-21T10:03:45Z | 2025-05-21T10:03:45Z |
| suse-su-2025:01627-1 | Security update for the Linux Kernel | 2025-05-21T10:02:17Z | 2025-05-21T10:02:17Z |
| suse-su-2025:01620-1 | Security update for the Linux Kernel | 2025-05-21T09:58:56Z | 2025-05-21T09:58:56Z |
| suse-su-2025:01619-1 | Security update for s390-tools | 2025-05-21T09:57:18Z | 2025-05-21T09:57:18Z |
| suse-su-2025:01615-1 | Security update for grub2 | 2025-05-21T09:53:07Z | 2025-05-21T09:53:07Z |
| suse-su-2025:01614-1 | Security update for the Linux Kernel | 2025-05-21T09:52:35Z | 2025-05-21T09:52:35Z |
| suse-su-2025:01611-1 | Security update for the Linux Kernel (Live Patch 34 for SLE 15 SP4) | 2025-05-21T08:03:50Z | 2025-05-21T08:03:50Z |
| suse-su-2025:01610-1 | Security update for the Linux Kernel (Live Patch 45 for SLE 15 SP3) | 2025-05-21T07:03:54Z | 2025-05-21T07:03:54Z |
| suse-su-2025:01603-1 | Security update for the Linux Kernel RT (Live Patch 3 for SLE 15 SP6) | 2025-05-20T12:04:02Z | 2025-05-20T12:04:02Z |
| suse-su-2025:01601-1 | Security update for the Linux Kernel RT (Live Patch 0 for SLE 15 SP6) | 2025-05-20T12:03:40Z | 2025-05-20T12:03:40Z |
| suse-su-2025:01600-1 | Security update for the Linux Kernel | 2025-05-20T11:49:32Z | 2025-05-20T11:49:32Z |
| suse-su-2025:01599-1 | Security update for glib2 | 2025-05-20T10:52:51Z | 2025-05-20T10:52:51Z |
| suse-su-2025:20331-1 | Security update for python-httpcore, python-h11 | 2025-05-20T08:49:02Z | 2025-05-20T08:49:02Z |
| suse-su-2025:20330-1 | Security update for python-h11, python-httpcore | 2025-05-20T08:39:06Z | 2025-05-20T08:39:06Z |
| suse-su-2025:01598-1 | Security update for the Linux Kernel (Live Patch 63 for SLE 12 SP5) | 2025-05-20T08:34:45Z | 2025-05-20T08:34:45Z |
| suse-su-2025:01596-1 | Security update for helm | 2025-05-20T07:55:08Z | 2025-05-20T07:55:08Z |
| suse-su-2025:01593-1 | Security update for the Linux Kernel (Live Patch 60 for SLE 12 SP5) | 2025-05-20T00:35:35Z | 2025-05-20T00:35:35Z |
| suse-su-2025:01591-1 | Security update for python-maturin | 2025-05-19T21:24:46Z | 2025-05-19T21:24:46Z |
| suse-su-2025:01590-1 | Security update for the Linux Kernel (Live Patch 56 for SLE 12 SP5) | 2025-05-19T20:39:22Z | 2025-05-19T20:39:22Z |
| suse-su-2025:01586-1 | Security update for rubygem-rack | 2025-05-19T17:23:40Z | 2025-05-19T17:23:40Z |
| suse-su-2025:01585-1 | Security update for apache2-mod_auth_openidc | 2025-05-19T17:21:51Z | 2025-05-19T17:21:51Z |
| suse-su-2025:1583-1 | Security update for brltty | 2025-05-19T14:23:41Z | 2025-05-19T14:23:41Z |
| suse-su-2025:1582-1 | Security update for brltty | 2025-05-19T14:23:04Z | 2025-05-19T14:23:04Z |
| suse-su-2025:1579-1 | Security update for brltty | 2025-05-19T12:40:43Z | 2025-05-19T12:40:43Z |
| suse-su-2025:1576-1 | Security update for openssh | 2025-05-19T04:49:08Z | 2025-05-19T04:49:08Z |
| suse-su-2025:1574-1 | Security update for the Linux Kernel | 2025-05-16T18:36:34Z | 2025-05-16T18:36:34Z |
| suse-su-2025:1573-1 | Security update for the Linux Kernel | 2025-05-16T16:32:08Z | 2025-05-16T16:32:08Z |
| suse-su-2025:1572-1 | Security update for libraw | 2025-05-16T14:07:06Z | 2025-05-16T14:07:06Z |
| suse-su-2025:1571-1 | Security update for gimp | 2025-05-16T13:48:57Z | 2025-05-16T13:48:57Z |
| suse-su-2025:1570-1 | Security update for cargo-c | 2025-05-16T13:44:03Z | 2025-05-16T13:44:03Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| cnvd-2025-27240 | WordPress Gutenberg plugin跨站脚本漏洞 | 2025-11-05 | 2025-11-06 |
| cnvd-2025-27239 | WordPress Groundhogg Plugin跨站脚本漏洞 | 2025-11-05 | 2025-11-06 |
| cnvd-2025-27238 | WordPress FuseWP plugin未授权修改数据漏洞 | 2025-11-05 | 2025-11-06 |
| cnvd-2025-27114 | Tenda AC10缓冲区溢出漏洞 | 2025-11-05 | 2025-11-06 |
| cnvd-2025-27063 | WordPress Folderly plugin未经授权的数据修改漏洞 | 2025-11-05 | 2025-11-06 |
| cnvd-2025-27062 | WordPress Flying Images plugin跨站脚本漏洞 | 2025-11-05 | 2025-11-06 |
| cnvd-2025-27061 | WordPress Essential Addons for Elementor plugin授权缺失漏洞 | 2025-11-05 | 2025-11-06 |
| cnvd-2025-27060 | WordPress ERI File Library plugin未授权数据访问漏洞 | 2025-11-05 | 2025-11-06 |
| cnvd-2025-27059 | WordPress Employee Spotlight plugin跨站脚本漏洞 | 2025-11-05 | 2025-11-06 |
| cnvd-2025-27058 | WordPress Document Library Lite plugin不当授权漏洞 | 2025-11-05 | 2025-11-06 |
| cnvd-2025-27057 | WordPress Depicter plugin跨站请求伪造漏洞 | 2025-11-05 | 2025-11-06 |
| cnvd-2025-27056 | WordPress Consulting plugin文件包含漏洞 | 2025-11-05 | 2025-11-06 |
| cnvd-2025-27055 | WordPress Consulting Elementor Widgets plugin文件包含漏洞 | 2025-11-05 | 2025-11-06 |
| cnvd-2025-27054 | WordPress Consulting Elementor Widgets plugin跨站脚本漏洞 | 2025-11-05 | 2025-11-06 |
| cnvd-2025-27053 | WordPress Community Events plugin跨站脚本漏洞 | 2025-11-05 | 2025-11-06 |
| cnvd-2025-27052 | WordPress Blocksy Companion Plugin跨站脚本漏洞 | 2025-11-05 | 2025-11-06 |
| cnvd-2025-27051 | WordPress Bard plugin跨站请求伪造漏洞 | 2025-11-05 | 2025-11-06 |
| cnvd-2025-27050 | WordPress AppPresser plugin未经授权的数据访问漏洞 | 2025-11-05 | 2025-11-06 |
| cnvd-2025-27049 | WordPress Analytify Pro plugin信息泄露漏洞 | 2025-11-05 | 2025-11-06 |
| cnvd-2025-27048 | WordPress Advanced Database Cleaner plugin跨站请求伪造漏洞 | 2025-11-05 | 2025-11-06 |
| cnvd-2025-26891 | 多款Mozilla产品代码执行漏洞（CNVD-2025-26891） | 2025-09-18 | 2025-11-06 |
| cnvd-2025-26890 | 多款Mozilla产品欺骗漏洞（CNVD-2025-26890） | 2025-09-18 | 2025-11-06 |
| cnvd-2025-26885 | Google Android权限提升漏洞（CNVD-2025-26885） | 2025-09-08 | 2025-11-06 |
| cnvd-2025-26884 | Google Android权限提升漏洞（CNVD-2025-26884） | 2025-09-08 | 2025-11-06 |
| cnvd-2025-26883 | Google Android权限提升漏洞（CNVD-2025-26883） | 2025-09-08 | 2025-11-06 |
| cnvd-2025-26882 | Google Android权限提升漏洞（CNVD-2025-26882） | 2025-09-08 | 2025-11-06 |
| cnvd-2025-26881 | Google Android拒绝服务漏洞（CNVD-2025-26881） | 2025-09-08 | 2025-11-06 |
| cnvd-2025-26880 | Google Android信息泄露漏洞（CNVD-2025-26880） | 2025-09-08 | 2025-11-06 |
| cnvd-2025-26879 | Google Android权限提升漏洞（CNVD-2025-26879） | 2025-09-08 | 2025-11-06 |
| cnvd-2025-26878 | TP-LINK AX10信息泄露漏洞 | 2025-09-11 | 2025-11-06 |
| ID | Description | Published | Updated |
|---|---|---|---|
| CERTFR-2024-AVI-1051 | Multiples vulnérabilités dans les produits IBM | 2024-12-06T00:00:00.000000 | 2024-12-06T00:00:00.000000 |
| CERTFR-2024-AVI-1050 | Multiples vulnérabilités dans le noyau Linux de Red Hat | 2024-12-06T00:00:00.000000 | 2024-12-06T00:00:00.000000 |
| CERTFR-2024-AVI-1049 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2024-12-06T00:00:00.000000 | 2024-12-06T00:00:00.000000 |
| CERTFR-2024-AVI-1048 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2024-12-06T00:00:00.000000 | 2024-12-06T00:00:00.000000 |
| CERTFR-2024-AVI-1047 | Multiples vulnérabilités dans Microsoft Edge | 2024-12-06T00:00:00.000000 | 2024-12-06T00:00:00.000000 |
| CERTFR-2024-AVI-1046 | Multiples vulnérabilités dans Tenable Security Center | 2024-12-06T00:00:00.000000 | 2024-12-06T00:00:00.000000 |
| CERTFR-2024-AVI-1045 | Multiples vulnérabilités dans Google Pixel | 2024-12-06T00:00:00.000000 | 2024-12-06T00:00:00.000000 |
| certfr-2024-avi-1044 | Multiples vulnérabilités dans MISP | 2024-12-05T00:00:00.000000 | 2024-12-05T00:00:00.000000 |
| certfr-2024-avi-1043 | Vulnérabilité dans Cisco NX-OS | 2024-12-05T00:00:00.000000 | 2024-12-05T00:00:00.000000 |
| certfr-2024-avi-1042 | Multiples vulnérabilités dans Sonicwall Secure Mobile Access | 2024-12-05T00:00:00.000000 | 2024-12-05T00:00:00.000000 |
| CERTFR-2024-AVI-1044 | Multiples vulnérabilités dans MISP | 2024-12-05T00:00:00.000000 | 2024-12-05T00:00:00.000000 |
| CERTFR-2024-AVI-1043 | Vulnérabilité dans Cisco NX-OS | 2024-12-05T00:00:00.000000 | 2024-12-05T00:00:00.000000 |
| CERTFR-2024-AVI-1042 | Multiples vulnérabilités dans Sonicwall Secure Mobile Access | 2024-12-05T00:00:00.000000 | 2024-12-05T00:00:00.000000 |
| certfr-2024-avi-1041 | Vulnérabilité dans SolarWinds Platform | 2024-12-04T00:00:00.000000 | 2024-12-04T00:00:00.000000 |
| certfr-2024-avi-1040 | Vulnérabilité dans Moxa VPort 07-3 Series | 2024-12-04T00:00:00.000000 | 2024-12-04T00:00:00.000000 |
| certfr-2024-avi-1039 | Multiples vulnérabilités dans les produits Veeam | 2024-12-04T00:00:00.000000 | 2024-12-04T00:00:00.000000 |
| certfr-2024-avi-1038 | Vulnérabilité dans Google Chrome | 2024-12-04T00:00:00.000000 | 2024-12-04T00:00:00.000000 |
| certfr-2024-avi-1037 | Multiples vulnérabilités dans HPE Aruba Networking ClearPass Policy Manager | 2024-12-04T00:00:00.000000 | 2024-12-04T00:00:00.000000 |
| CERTFR-2024-AVI-1041 | Vulnérabilité dans SolarWinds Platform | 2024-12-04T00:00:00.000000 | 2024-12-04T00:00:00.000000 |
| CERTFR-2024-AVI-1040 | Vulnérabilité dans Moxa VPort 07-3 Series | 2024-12-04T00:00:00.000000 | 2024-12-04T00:00:00.000000 |
| CERTFR-2024-AVI-1039 | Multiples vulnérabilités dans les produits Veeam | 2024-12-04T00:00:00.000000 | 2024-12-04T00:00:00.000000 |
| CERTFR-2024-AVI-1038 | Vulnérabilité dans Google Chrome | 2024-12-04T00:00:00.000000 | 2024-12-04T00:00:00.000000 |
| CERTFR-2024-AVI-1037 | Multiples vulnérabilités dans HPE Aruba Networking ClearPass Policy Manager | 2024-12-04T00:00:00.000000 | 2024-12-04T00:00:00.000000 |
| certfr-2024-avi-1036 | Multiples vulnérabilités dans Google Android | 2024-12-03T00:00:00.000000 | 2024-12-03T00:00:00.000000 |
| certfr-2024-avi-1035 | Multiples vulnérabilités dans les produits Axis | 2024-12-03T00:00:00.000000 | 2024-12-03T00:00:00.000000 |
| certfr-2024-avi-1034 | Multiples vulnérabilités dans Ruby on Rails | 2024-12-03T00:00:00.000000 | 2024-12-03T00:00:00.000000 |
| CERTFR-2024-AVI-1036 | Multiples vulnérabilités dans Google Android | 2024-12-03T00:00:00.000000 | 2024-12-03T00:00:00.000000 |
| CERTFR-2024-AVI-1035 | Multiples vulnérabilités dans les produits Axis | 2024-12-03T00:00:00.000000 | 2024-12-03T00:00:00.000000 |
| CERTFR-2024-AVI-1034 | Multiples vulnérabilités dans Ruby on Rails | 2024-12-03T00:00:00.000000 | 2024-12-03T00:00:00.000000 |
| certfr-2024-avi-1033 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2024-11-29T00:00:00.000000 | 2024-11-29T00:00:00.000000 |