Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2026-24967 |
5.3 (3.1)
|
WordPress Amelia plugin <= 1.2.38 - Broken Access Cont… |
ameliabooking |
Amelia |
2026-02-03T14:08:35.587Z | 2026-02-03T16:48:43.279Z |
| CVE-2026-24985 |
4.3 (3.1)
|
WordPress WP Forms Signature Contract Add-On plugin <=… |
approveme |
WP Forms Signature Contract Add-On |
2026-02-03T14:08:36.187Z | 2026-02-03T16:47:56.761Z |
| CVE-2026-24991 |
5.3 (3.1)
|
WordPress Extensions For CF7 plugin <= 3.4.0 - Insecur… |
HT Plugins |
Extensions For CF7 |
2026-02-03T14:08:36.896Z | 2026-02-03T16:43:53.305Z |
| CVE-2025-69929 |
9.8 (3.1)
|
An issue in N3uron Web User Interface v.1.21.7-24… |
n/a |
n/a |
2026-01-29T00:00:00.000Z | 2026-02-03T16:43:20.985Z |
| CVE-2025-63650 |
7.5 (3.1)
|
An out-of-bounds read in the mk_ptr_to_buf in mk_… |
n/a |
n/a |
2026-01-29T00:00:00.000Z | 2026-02-03T16:43:14.459Z |
| CVE-2025-63651 |
7.5 (3.1)
|
A use-after-free in the mk_string_char_search fun… |
n/a |
n/a |
2026-01-29T00:00:00.000Z | 2026-02-03T16:43:09.735Z |
| CVE-2025-63652 |
7.5 (3.1)
|
A use-after-free in the mk_http_request_end funct… |
n/a |
n/a |
2026-01-29T00:00:00.000Z | 2026-02-03T16:42:59.281Z |
| CVE-2025-63653 |
7.5 (3.1)
|
An out-of-bounds read in the mk_vhost_fdt_close f… |
n/a |
n/a |
2026-01-29T00:00:00.000Z | 2026-02-03T16:42:52.267Z |
| CVE-2025-63655 |
7.5 (3.1)
|
A NULL pointer dereference in the mk_http_range_p… |
n/a |
n/a |
2026-01-29T00:00:00.000Z | 2026-02-03T16:42:45.793Z |
| CVE-2025-63656 |
7.5 (3.1)
|
An out-of-bounds read in the header_cmp function … |
n/a |
n/a |
2026-01-29T00:00:00.000Z | 2026-02-03T16:42:37.757Z |
| CVE-2025-63657 |
7.5 (3.1)
|
An out-of-bounds read in the mk_mimetype_find fun… |
n/a |
n/a |
2026-01-29T00:00:00.000Z | 2026-02-03T16:42:32.745Z |
| CVE-2025-63658 |
7.5 (3.1)
|
A stack overflow in the mk_http_index_lookup func… |
n/a |
n/a |
2026-01-29T00:00:00.000Z | 2026-02-03T16:42:24.575Z |
| CVE-2025-69604 |
7.8 (3.1)
|
An issue in Shirt Pocket's SuperDuper! 3.11 and e… |
n/a |
n/a |
2026-01-29T00:00:00.000Z | 2026-02-03T16:42:17.841Z |
| CVE-2026-25210 |
6.9 (3.1)
|
In libexpat before 2.7.4, the doContent function … |
libexpat project |
libexpat |
2026-01-30T06:40:27.917Z | 2026-02-03T16:42:10.810Z |
| CVE-2026-25211 |
3.2 (3.1)
|
Llama Stack (aka llama-stack) before 0.4.0rc3 doe… |
llamastack |
Llama Stack |
2026-01-30T07:16:14.350Z | 2026-02-03T16:42:00.560Z |
| CVE-2021-47909 |
8.6 (4.0)
8.1 (3.1)
|
Mult-E-Cart Ultimate 2.4 SQL Injection via Vulnerable … |
Techraft |
Digital Multivendor Marketplace Online Store |
2026-02-01T12:15:47.062Z | 2026-02-03T16:41:54.293Z |
| CVE-2021-47911 |
4.8 (4.0)
5.4 (3.1)
|
Affiliate Pro 1.7 Reflected Cross-Site Scripting via I… |
jdwebdesigner |
Affiliate Pro |
2026-02-01T12:15:47.540Z | 2026-02-03T16:41:45.627Z |
| CVE-2021-47912 |
5.1 (4.0)
6.4 (3.1)
|
PHP Melody 3.0 Non-Persistent Cross-Site Scripting via… |
PHPSUGAR |
PHP Melody |
2026-02-01T12:15:47.948Z | 2026-02-03T16:41:37.685Z |
| CVE-2021-47913 |
5.1 (4.0)
6.4 (3.1)
|
PHP Melody 3.0 Persistent Cross-Site Scripting via Vid… |
PHPSUGAR |
PHP Melody |
2026-02-01T12:15:48.331Z | 2026-02-03T16:41:31.586Z |
| CVE-2022-50940 |
5.1 (4.0)
6.4 (3.1)
|
Knap Advanced PHP Login 3.1.3 Persistent Cross-Site Sc… |
ajay138 |
Knap Advanced PHP Login |
2026-02-01T12:15:52.161Z | 2026-02-03T16:41:23.239Z |
| CVE-2022-50941 |
5.1 (4.0)
6.4 (3.1)
|
BootCommerce 3.2.1 Persistent Cross-Site Scripting via… |
MrPlugins |
BootCommerce |
2026-02-01T12:15:52.540Z | 2026-02-03T16:41:17.944Z |
| CVE-2022-50942 |
4.8 (4.0)
5.4 (3.1)
|
Incinga Web 2.8.2 Client-Side Cross-Site Scripting via… |
Incinga |
Incinga Web |
2026-02-01T12:15:52.927Z | 2026-02-03T16:41:08.477Z |
| CVE-2021-47921 |
7.1 (4.0)
6.5 (3.1)
|
Free Photo & Video Vault 0.0.2 Directory Traversal Vul… |
Author: Scott Ferreira |
Free Photo & Video Vault - WiFi Transfer |
2026-02-01T12:56:56.509Z | 2026-02-03T16:41:00.723Z |
| CVE-2020-37061 |
8.5 (4.0)
7.8 (3.1)
|
BOOTP Turbo 2.0.1214 - 'BOOTP Turbo' Unquoted Service Path |
Weird-Solutions |
BOOTP Turbo |
2026-02-01T14:38:28.927Z | 2026-02-03T16:40:50.398Z |
| CVE-2026-24994 |
5.3 (3.1)
|
WordPress Sunshine Photo Cart plugin <= 3.5.7.2 - Brok… |
sunshinephotocart |
Sunshine Photo Cart |
2026-02-03T14:08:37.221Z | 2026-02-03T16:39:59.846Z |
| CVE-2026-24984 |
N/A
|
WordPress Visual Link Preview plugin <= 2.2.9 - Broken… |
Brecht |
Visual Link Preview |
2026-02-03T14:08:35.984Z | 2026-02-03T16:37:30.908Z |
| CVE-2026-24986 |
5.4 (3.1)
|
WordPress Simple Membership WP user Import plugin <= 1… |
wp.insider |
Simple Membership WP user Import |
2026-02-03T14:08:36.383Z | 2026-02-03T16:28:07.865Z |
| CVE-2025-14550 |
N/A
|
Potential denial-of-service vulnerability via repeated… |
djangoproject |
Django |
2026-02-03T14:38:15.875Z | 2026-02-03T16:27:38.976Z |
| CVE-2026-1287 |
N/A
|
Potential SQL injection in column aliases via control … |
djangoproject |
Django |
2026-02-03T14:36:03.630Z | 2026-02-03T16:26:43.253Z |
| CVE-2026-24990 |
5.4 (3.1)
|
WordPress WP Docs plugin <= 2.2.8 - Broken Access Cont… |
Fahad Mahmood |
WP Docs |
2026-02-03T14:08:36.720Z | 2026-02-03T16:26:18.031Z |
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2026-22548 |
5.9 (3.1)
8.2 (4.0)
|
BIG-IP Advanced WAF and ASM vulnerability |
F5 |
BIG-IP |
2026-02-04T15:02:05.724Z | 2026-02-04T16:04:59.113Z |
| CVE-2026-22228 |
6.8 (4.0)
|
Improper Input Validation Leading to DoS on TP-Link Ar… |
TP-Link Systems Inc. |
Archer BE230 v1.2 |
2026-02-03T17:20:34.537Z | 2026-02-04T18:28:42.403Z |
| CVE-2026-22220 |
6.8 (4.0)
|
Improper Input Validation Leading to DoS on TP-Link Ar… |
TP-Link Systems Inc. |
Archer BE230 v1.2 |
2026-02-03T17:15:59.836Z | 2026-02-04T18:32:13.840Z |
| CVE-2026-21393 |
5.4 (3.0)
4.8 (4.0)
|
Movable Type contains a stored cross-site scripti… |
Six Apart Ltd. |
Movable Type (Software Edition) |
2026-02-04T07:02:50.465Z | 2026-02-04T16:08:26.340Z |
| CVE-2026-20987 |
8.7 (4.0)
|
Improper input validation in GalaxyDiagnostics pr… |
Samsung Mobile |
GalaxyDiagnostics |
2026-02-04T06:14:50.618Z | 2026-02-04T16:58:49.035Z |
| CVE-2026-20986 |
5.1 (4.0)
|
Path traversal in Samsung Members prior to Chines… |
Samsung Mobile |
Chinese Samsung Members |
2026-02-04T06:14:49.397Z | 2026-02-04T16:58:28.932Z |
| CVE-2026-20985 |
7 (4.0)
|
Improper input validation in Samsung Members prio… |
Samsung Mobile |
Samsung Members |
2026-02-04T06:14:48.243Z | 2026-02-04T16:58:05.810Z |
| CVE-2026-20984 |
5.1 (4.0)
|
Improper handling of insufficient permission in G… |
Samsung Mobile |
Galaxy Wearable |
2026-02-04T06:14:47.058Z | 2026-02-04T16:57:38.337Z |
| CVE-2026-20732 |
3.1 (3.1)
2.3 (4.0)
|
BIG-IP Configuration utility vulnerability |
F5 |
BIG-IP |
2026-02-04T15:02:05.281Z | 2026-02-04T16:08:05.470Z |
| CVE-2026-20730 |
3.3 (3.1)
2 (4.0)
|
BIG-IP Edge Client for Windows vulnerability |
F5 |
BIG-IP Edge Client |
2026-02-04T15:02:04.810Z | 2026-02-04T16:10:57.286Z |
| CVE-2026-1835 |
5.3 (4.0)
4.3 (3.1)
4.3 (3.0)
|
lcg0124 BootDo cross-site request forgery |
lcg0124 |
BootDo |
2026-02-04T00:02:08.877Z | 2026-02-04T20:19:24.564Z |
| CVE-2026-1819 |
8.8 (3.1)
|
Stored XSS in Karel Electronics' ViPort |
Karel Electronics Industry and Trade Inc. |
ViPort |
2026-02-04T07:52:23.436Z | 2026-02-04T16:19:45.790Z |
| CVE-2026-1813 |
5.3 (4.0)
6.3 (3.1)
6.3 (3.0)
|
bolo-blog bolo-solo FreeMarker Template PicUploadProce… |
bolo-blog |
bolo-solo |
2026-02-03T23:32:08.090Z | 2026-02-04T14:18:29.231Z |
| CVE-2026-1812 |
5.3 (4.0)
6.3 (3.1)
6.3 (3.0)
|
bolo-blog bolo-solo Filename BackupService.java import… |
bolo-blog |
bolo-solo |
2026-02-03T22:32:08.158Z | 2026-02-04T14:31:02.355Z |
| CVE-2026-1811 |
5.3 (4.0)
6.3 (3.1)
6.3 (3.0)
|
bolo-blog bolo-solo Filename BackupService.java import… |
bolo-blog |
bolo-solo |
2026-02-03T21:32:07.628Z | 2026-02-03T21:43:35.663Z |
| CVE-2026-1810 |
5.3 (4.0)
6.3 (3.1)
6.3 (3.0)
|
bolo-blog bolo-solo ZIP File BackupService.java unpack… |
bolo-blog |
bolo-solo |
2026-02-03T20:32:07.343Z | 2026-02-03T20:46:15.103Z |
| CVE-2026-1803 |
9.2 (4.0)
8.1 (3.1)
8.1 (3.0)
|
Ziroom ZHOME A0101 Dropbear SSH Service default credentials |
Ziroom |
ZHOME A0101 |
2026-02-03T20:02:05.815Z | 2026-02-03T20:26:41.310Z |
| CVE-2026-1802 |
6.9 (4.0)
7.3 (3.1)
7.3 (3.0)
|
Ziroom ZHOME A0101 zrMacClone.lua macAddrClone command… |
Ziroom |
ZHOME A0101 |
2026-02-03T19:02:06.964Z | 2026-02-03T19:50:30.284Z |
| CVE-2026-1801 |
5.3 (3.1)
|
Libsoup: libsoup: http request smuggling via malformed… |
Red Hat |
Red Hat Enterprise Linux 10 |
2026-02-03T20:12:21.360Z | 2026-02-03T20:44:29.691Z |
| CVE-2026-1791 |
2.7 (3.1)
|
Arbitrary File Upload Vulnerability in Operation and M… |
Hillstone Networks |
Operation and Maintenance Security Gateway |
2026-02-04T03:11:30.275Z | 2026-02-04T20:19:45.301Z |
| CVE-2026-1756 |
8.8 (3.1)
|
WP FOFT Loader <= 2.1.39 - Authenticated (Author+) Arb… |
seezee |
WP FOFT Loader |
2026-02-04T06:42:37.451Z | 2026-02-04T16:59:57.807Z |
| CVE-2026-1755 |
6.4 (3.1)
|
Menu Icons by ThemeIsle <= 0.13.20 - Authenticated (Au… |
themeisle |
Menu Icons by ThemeIsle |
2026-02-03T22:22:47.333Z | 2026-02-04T14:35:12.337Z |
| CVE-2026-1633 |
10 (3.1)
10 (4.0)
|
Synectix LAN 232 TRIO Missing Authentication for Criti… |
Synectix |
LAN 232 TRIO |
2026-02-03T23:02:58.208Z | 2026-02-04T20:18:22.726Z |
| CVE-2026-1632 |
9.1 (3.1)
9.3 (4.0)
|
RISS SRL MOMA Seismic Station Missing Authentication f… |
RISS SRL |
MOMA Seismic Station |
2026-02-03T22:59:32.539Z | 2026-02-04T20:17:57.156Z |
| CVE-2026-1622 |
4.8 (4.0)
|
Unredacted data exposure in query.log |
neo4j |
Enterprise Edition |
2026-02-04T09:14:46.320Z | 2026-02-04T15:12:37.400Z |
| CVE-2026-1580 |
8.8 (3.1)
|
ingress-nginx auth-method nginx configuration injection |
Kubernetes |
ingress-nginx |
2026-02-03T22:16:47.223Z | 2026-02-06T03:14:22.819Z |
| CVE-2026-1370 |
4.9 (3.1)
|
SIBS - WooCommerce <= 2.2.0 - Authenticated (Admin+) S… |
comprassibs |
SIBS woocommerce payment gateway |
2026-02-04T08:25:33.253Z | 2026-02-04T15:18:10.439Z |
| CVE-2026-1341 |
9.3 (4.0)
|
Missing Authentication for Critical Function in Avatio… |
Avation |
Avation Light Engine Pro |
2026-02-03T21:26:41.708Z | 2026-02-04T16:47:32.531Z |
| CVE-2026-0873 |
4.8 (4.0)
|
Privilege Elevation in Ercom Cryptobox administration … |
Ercom |
Cryptobox |
2026-02-04T10:42:14.626Z | 2026-02-04T14:56:23.511Z |
| CVE-2026-0816 |
4.9 (3.1)
|
All push notification for WP <= 1.5.3 - Authenticated … |
gtlwpdev |
All push notification for WP |
2026-02-04T08:25:34.026Z | 2026-02-04T15:13:39.572Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| fkie_cve-2026-1633 | The Synectix LAN 232 TRIO 3-Port serial to ethernet adapter exposes its web management interface wi… | 2026-02-04T00:16:08.557 | 2026-02-04T16:33:44.537 |
| fkie_cve-2026-1632 | MOMA Seismic Station Version v2.4.2520 and prior exposes its web management interface without requi… | 2026-02-03T23:16:06.457 | 2026-02-04T16:33:44.537 |
| fkie_cve-2026-1622 | Neo4j Enterprise and Community editions versions prior to 2026.01.3 and 5.26.21 are vulnerable to a… | 2026-02-04T10:16:04.780 | 2026-02-04T16:33:44.537 |
| fkie_cve-2026-1580 | A security issue was discovered in ingress-nginx where the `nginx.ingress.kubernetes.io/auth-method… | 2026-02-03T23:16:06.290 | 2026-02-04T16:33:44.537 |
| fkie_cve-2026-1370 | The SIBS woocommerce payment gateway plugin for WordPress is vulnerable to time-based SQL Injection… | 2026-02-04T09:15:52.977 | 2026-02-04T16:33:44.537 |
| fkie_cve-2026-1341 | Avation Light Engine Pro exposes its configuration and control interface without any authentication… | 2026-02-03T22:16:29.517 | 2026-02-04T16:33:44.537 |
| fkie_cve-2026-0873 | On a Cryptobox platform where administrator segregation based on entities is used, some vulnerabili… | 2026-02-04T11:16:02.797 | 2026-02-04T16:33:44.537 |
| fkie_cve-2026-0816 | The All push notification for WP plugin for WordPress is vulnerable to time-based SQL Injection via… | 2026-02-04T09:15:52.810 | 2026-02-04T16:33:44.537 |
| fkie_cve-2026-0743 | The WP Content Permission plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the… | 2026-02-04T09:15:52.653 | 2026-02-04T16:33:44.537 |
| fkie_cve-2026-0742 | The Smart Appointment & Booking plugin for WordPress is vulnerable to Stored Cross-Site Scripting v… | 2026-02-04T09:15:52.477 | 2026-02-04T16:33:44.537 |
| fkie_cve-2026-0681 | The Extended Random Number Generator plugin for WordPress is vulnerable to Stored Cross-Site Script… | 2026-02-04T09:15:52.313 | 2026-02-04T16:33:44.537 |
| fkie_cve-2026-0679 | The Fortis for WooCommerce plugin for WordPress is vulnerable to authorization bypass due to an inv… | 2026-02-04T09:15:52.143 | 2026-02-04T16:33:44.537 |
| fkie_cve-2026-0620 | When configured as L2TP/IPSec VPN server, Archer AXE75 V1 may accept connections using L2TP without… | 2026-02-03T19:16:15.580 | 2026-02-04T16:33:44.537 |
| fkie_cve-2026-0572 | The WebPurify Profanity Filter plugin for WordPress is vulnerable to unauthorized modification of d… | 2026-02-04T09:15:51.970 | 2026-02-04T16:33:44.537 |
| fkie_cve-2025-71192 | In the Linux kernel, the following vulnerability has been resolved: ALSA: ac97: fix a double free … | 2026-02-04T16:16:18.770 | 2026-02-04T16:33:44.537 |
| fkie_cve-2025-65081 | An out-of-bounds read vulnerability has been identified in the Postscript interpreter in various Le… | 2026-02-03T21:16:11.737 | 2026-02-04T16:33:44.537 |
| fkie_cve-2025-65080 | A type confusion vulnerability has been identified in the Postscript interpreter in various Lexmark… | 2026-02-03T21:16:11.577 | 2026-02-04T16:33:44.537 |
| fkie_cve-2025-65079 | A heap-based buffer overflow vulnerability has been identified in the Postscript interpreter in var… | 2026-02-03T21:16:11.420 | 2026-02-04T16:33:44.537 |
| fkie_cve-2025-65078 | An untrusted search path vulnerability has been identified in the Embedded Solutions Framework in v… | 2026-02-03T21:16:11.280 | 2026-02-04T16:33:44.537 |
| fkie_cve-2025-65077 | A relative path traversal vulnerability has been identified in the Embedded Solutions Framework in … | 2026-02-03T21:16:11.120 | 2026-02-04T16:33:44.537 |
| fkie_cve-2025-64438 | Fast DDS is a C++ implementation of the DDS (Data Distribution Service) standard of the OMG (Object… | 2026-02-03T20:15:57.280 | 2026-02-04T16:33:44.537 |
| fkie_cve-2025-64098 | Fast DDS is a C++ implementation of the DDS (Data Distribution Service) standard of the OMG (Object… | 2026-02-03T20:15:57.127 | 2026-02-04T16:33:44.537 |
| fkie_cve-2025-62799 | Fast DDS is a C++ implementation of the DDS (Data Distribution Service) standard of the OMG (Object… | 2026-02-03T20:15:56.983 | 2026-02-04T16:33:44.537 |
| fkie_cve-2025-62603 | Fast DDS is a C++ implementation of the DDS (Data Distribution Service) standard of the OMG (Object… | 2026-02-03T20:15:56.787 | 2026-02-04T16:33:44.537 |
| fkie_cve-2025-62602 | Fast DDS is a C++ implementation of the DDS (Data Distribution Service) standard of the OMG (Object… | 2026-02-03T20:15:56.640 | 2026-02-04T16:33:44.537 |
| fkie_cve-2025-62601 | Fast DDS is a C++ implementation of the DDS (Data Distribution Service) standard of the OMG (Object… | 2026-02-03T20:15:56.493 | 2026-02-04T16:33:44.537 |
| fkie_cve-2025-62600 | Fast DDS is a C++ implementation of the DDS (Data Distribution Service) standard of the OMG (Object… | 2026-02-03T19:16:14.170 | 2026-02-04T16:33:44.537 |
| fkie_cve-2025-5329 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability … | 2026-02-04T14:16:08.840 | 2026-02-04T16:33:44.537 |
| fkie_cve-2025-41085 | Stored Cross-Site Scripting (XSS) vulnerability type in Apidog in the version 2.7.15, where SVG im… | 2026-02-04T10:16:03.270 | 2026-02-04T16:33:44.537 |
| fkie_cve-2025-36094 | IBM Cloud Pak for Business Automation 25.0.0 through 25.0.0 Interim Fix 002, 24.0.1 through 24.0.1 … | 2026-02-03T23:16:05.780 | 2026-02-04T16:33:44.537 |
| ID | Severity | Description | Published | Updated |
|---|---|---|---|---|
| ghsa-r738-32mw-386p |
10.0 (3.1)
|
In the Eclipse Theia Website repository, the GitHub Actions workflow .github/workflows/preview.yml … | 2026-01-30T12:31:20Z | 2026-01-30T12:31:20Z |
| ghsa-pc3q-7xfr-h5h3 |
5.5 (3.1)
|
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: csa unmap use unin… | 2025-06-18T12:30:31Z | 2026-01-30T12:31:20Z |
| ghsa-mpfh-94p7-8328 |
5.5 (3.1)
|
In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: fix RCU stall wh… | 2025-04-16T15:34:39Z | 2026-01-30T12:31:20Z |
| ghsa-jw7f-48gr-mm37 |
7.2 (3.1)
|
Some Hikvision Wireless Access Points are vulnerable to authenticated command execution due to insu… | 2026-01-30T12:31:20Z | 2026-01-30T12:31:20Z |
| ghsa-8phj-p75x-7gv8 |
|
In the Linux kernel, the following vulnerability has been resolved: accel/ivpu: Fix race condition… | 2025-12-24T15:30:44Z | 2026-01-30T12:31:20Z |
| ghsa-6qp4-m27m-3pjj |
7.2 (3.1)
|
Due to insufficient input parameter validation on the interface, authenticated users of certain HIK… | 2026-01-30T12:31:20Z | 2026-01-30T12:31:20Z |
| ghsa-4f82-h634-f877 |
|
In the Linux kernel, the following vulnerability has been resolved: exfat: fix refcount leak in ex… | 2025-12-24T12:30:29Z | 2026-01-30T12:31:20Z |
| ghsa-3737-xm99-hq62 |
4.3 (3.1)
|
Due to inadequate access control, authenticated users of certain HIKSEMI NAS products can manipulat… | 2026-01-30T12:31:20Z | 2026-01-30T12:31:20Z |
| ghsa-2838-84rj-32xc |
7.8 (3.1)
|
In the Linux kernel, the following vulnerability has been resolved: bridge: mcast: Fix use-after-f… | 2025-07-09T12:31:34Z | 2026-01-30T12:31:20Z |
| ghsa-h2j5-qh4r-f6cm |
8.2 (3.1)
|
Generation of Error Message Containing Sensitive Information vulnerability in Codriapp Innovation a… | 2026-01-30T09:30:55Z | 2026-01-30T09:30:55Z |
| ghsa-86f8-8qwm-r888 |
7.8 (3.1)
|
Dell Unity, version(s) 5.5.2 and prior, contain(s) an Improper Neutralization of Special Elements u… | 2026-01-30T09:30:55Z | 2026-01-30T09:30:55Z |
| ghsa-857q-6v86-xp84 |
6.9 (3.1)
|
In libexpat before 2.7.4, the doContent function does not properly determine the buffer size bufSiz… | 2026-01-30T09:30:55Z | 2026-01-30T09:30:55Z |
| ghsa-5jcv-37h5-w6rh |
7.8 (3.1)
|
Dell UnityVSA, version(s) 5.4 and prior, contain(s) an Improper Neutralization of Special Elements … | 2026-01-30T09:30:55Z | 2026-01-30T09:30:55Z |
| ghsa-8phm-9c2m-9hpq |
9.9 (3.1)
|
An input neutralization vulnerability in the File Operations API Endpoint component of Crafty Contr… | 2026-01-30T09:30:54Z | 2026-01-30T09:30:54Z |
| ghsa-7f48-jjj6-53wv |
7.1 (4.0)
|
Improper access control in the WCF endpoint in Edgemo (now owned by Danoffice IT) Local Admin Servi… | 2026-01-30T09:30:54Z | 2026-01-30T09:30:54Z |
| ghsa-m23h-283x-x3r6 |
8.2 (3.1)
|
An input neutralization vulnerability in the Backup Configuration component of Crafty Controller al… | 2026-01-30T09:30:53Z | 2026-01-30T09:30:53Z |
| ghsa-j9qc-jfwp-9x62 |
|
Rejected reason: Not used | 2026-01-30T06:30:15Z | 2026-01-30T06:30:16Z |
| ghsa-wqwp-c8g7-73q2 |
|
Rejected reason: Not used | 2026-01-30T06:30:15Z | 2026-01-30T06:30:15Z |
| ghsa-v8qv-xx7v-pc2c |
9.8 (3.1)
9.3 (4.0)
|
A SQL injection vulnerability in SUNNET Corporate Training Management System before 10.11 allows re… | 2025-09-25T15:30:23Z | 2026-01-30T06:30:15Z |
| ghsa-rw77-76p7-66x5 |
9.8 (3.1)
9.3 (4.0)
|
A missing authentication for critical function vulnerability in SUNNET Corporate Training Managemen… | 2025-09-25T15:30:22Z | 2026-01-30T06:30:15Z |
| ghsa-rcw8-rm48-wjhg |
|
Rejected reason: Not used | 2026-01-30T06:30:15Z | 2026-01-30T06:30:15Z |
| ghsa-q5hf-m4v3-72f4 |
|
Rejected reason: Not used | 2026-01-30T06:30:15Z | 2026-01-30T06:30:15Z |
| ghsa-p4wg-48wq-x28w |
9.8 (3.1)
6.9 (4.0)
|
An unrestricted upload of file with dangerous type vulnerability in SUNNET Corporate Training Manag… | 2025-09-25T15:30:23Z | 2026-01-30T06:30:15Z |
| ghsa-mhm4-qp75-jmxw |
9.8 (3.1)
10.0 (4.0)
|
An external control of file name or path vulnerability in SUNNET Corporate Training Management Syst… | 2025-09-25T15:30:23Z | 2026-01-30T06:30:15Z |
| ghsa-jf99-74qp-89mx |
7.5 (3.1)
8.7 (4.0)
|
Some end of service NETGEAR products provide "TelnetEnable" functionality, which allows a magic pac… | 2026-01-30T06:30:15Z | 2026-01-30T06:30:15Z |
| ghsa-gcgg-59wq-55r2 |
|
Rejected reason: Not used | 2026-01-30T06:30:15Z | 2026-01-30T06:30:15Z |
| ghsa-g6gp-xc9x-p59q |
9.3 (4.0)
|
An unrestricted upload of file with dangerous type vulnerability in the upload file function of Gal… | 2025-10-20T09:30:27Z | 2026-01-30T06:30:15Z |
| ghsa-fr4w-97qg-9f45 |
|
Rejected reason: Not used | 2026-01-30T06:30:15Z | 2026-01-30T06:30:15Z |
| ghsa-7x8r-3fp7-rjm3 |
|
Rejected reason: Not used | 2026-01-30T06:30:15Z | 2026-01-30T06:30:15Z |
| ghsa-7cmq-hgvr-hmwp |
9.8 (3.1)
9.3 (4.0)
|
A missing authorization vulnerability in SUNNET Corporate Training Management System before 10.11 a… | 2025-09-25T15:30:23Z | 2026-01-30T06:30:15Z |
| ID | Severity | Description | Package | Published | Updated |
|---|---|---|---|---|---|
| pysec-2013-2 |
|
lib/ansible/playbook/__init__.py in Ansible 1.2.x before 1.2.3, when playbook does not ru… | ansible | 2013-09-16T19:14:00Z | 2021-07-02T02:41:32.973358Z |
| pysec-2013-1 |
|
runner/connection_plugins/ssh.py in Ansible before 1.2.3, when using ControlPersist, allo… | ansible | 2013-09-16T19:14:00Z | 2021-07-02T02:41:32.926386Z |
| pysec-2018-34 |
|
(1) core/tests/test_memmap.py, (2) core/tests/test_multiarray.py, (3) f2py/f2py2e.py, and… | numpy | 2018-01-08T19:29:00Z | 2021-06-29T22:52:17.858494Z |
| pysec-2018-33 |
|
__init__.py in f2py in NumPy before 1.8.1 allows local users to write to arbitrary files … | numpy | 2018-01-08T19:29:00Z | 2021-06-29T22:52:17.794688Z |
| pysec-2017-1 |
|
The numpy.pad function in Numpy 1.13.1 and older versions is missing input validation. An… | numpy | 2017-08-15T16:29:00Z | 2021-06-29T22:52:17.919949Z |
| pysec-2021-104 |
|
Zope is an open-source web application server. This advisory extends the previous advisor… | zope | 2021-06-08T18:15:00Z | 2021-06-22T04:54:57.652841Z |
| pysec-2021-103 |
|
Wagtail is an open source content management system built on Django. A cross-site scripti… | wagtail | 2021-06-17T17:15:00Z | 2021-06-22T04:54:57.540693Z |
| pysec-2021-102 |
|
A Cross-site scripting (XSS) vulnerability exists in StackLift LocalStack 0.12.6. | localstack | 2021-05-07T05:15:00Z | 2021-06-22T04:54:56.108960Z |
| pysec-2021-101 |
|
The dashboard component of StackLift LocalStack 0.12.6 allows attackers to inject arbitra… | localstack | 2021-05-07T05:15:00Z | 2021-06-22T04:54:56.080124Z |
| pysec-2021-99 |
|
In Django 2.2 before 2.2.24, 3.x before 3.1.12, and 3.2 before 3.2.4, URLValidator, valid… | django | 2021-06-08T18:15:00Z | 2021-06-22T04:54:55.488063Z |
| pysec-2021-98 |
|
Django before 2.2.24, 3.x before 3.1.12, and 3.2.x before 3.2.4 has a potential directory… | django | 2021-06-08T18:15:00Z | 2021-06-22T04:54:55.381670Z |
| pysec-2021-100 |
|
FastAPI is a web framework for building APIs with Python 3.6+ based on standard Python ty… | fastapi | 2021-06-09T18:15:00Z | 2021-06-22T04:54:55.863034Z |
| pysec-2018-31 |
|
tlslite-ng version 0.7.3 and earlier, since commit d7b288316bca7bcdd082e6ccff5491e2413052… | tlslite-ng | 2018-04-18T19:29:00Z | 2021-06-16T00:03:25.014006Z |
| pysec-2021-97 |
|
The thefuck (aka The Fuck) package before 3.31 for Python allows Path Traversal that lead… | thefuck | 2021-06-10T11:15:00Z | 2021-06-16T00:03:24.982635Z |
| pysec-2018-29 |
|
Directory Traversal vulnerability in salt-api in SaltStack Salt before 2017.7.8 and 2018.… | salt | 2018-10-24T22:29:00Z | 2021-06-16T00:03:24.871222Z |
| pysec-2018-28 |
|
The Requests package before 2.20.0 for Python sends an HTTP Authorization header to an ht… | requests | 2018-10-09T17:29:00Z | 2021-06-16T00:03:24.800813Z |
| pysec-2018-25 |
|
In Apache Spark 1.0.0 to 2.1.2, 2.2.0 to 2.2.1, and 2.3.0, when using PySpark or SparkR, … | pyspark | 2018-07-12T13:29:00Z | 2021-06-16T00:03:24.717902Z |
| pysec-2018-5 |
|
An issue was discovered in Django 2.0 before 2.0.3, 1.11 before 1.11.11, and 1.8 before 1… | django | 2018-03-09T20:29:00Z | 2021-06-16T00:03:23.200365Z |
| pysec-2018-4 |
|
django.contrib.auth.forms.AuthenticationForm in Django 2.0 before 2.0.2, and 1.11.8 and 1… | django | 2018-02-05T03:29:00Z | 2021-06-16T00:03:23.096188Z |
| pysec-2018-16 |
|
An issue was discovered in Mayan EDMS before 3.0.2. The Appearance app sets window.locati… | mayan-edms-ng | 2018-09-03T19:29:00Z | 2021-06-16T00:03:23.682256Z |
| pysec-2018-14 |
|
An issue was discovered in Mayan EDMS before 3.0.2. The Cabinets app has XSS via a crafte… | mayan-edms | 2018-09-03T19:29:00Z | 2021-06-16T00:03:23.733638Z |
| pysec-2018-13 |
|
An issue was discovered in markdown2 (aka python-markdown2) through 2.3.5. The safe_mode … | markdown2 | 2018-01-18T21:29:00Z | 2021-06-16T00:03:23.657711Z |
| pysec-2018-12 |
|
An issue was discovered in lxml before 4.2.5. lxml/html/clean.py in the lxml.html.clean m… | lxml | 2018-12-02T10:29:00Z | 2021-06-16T00:03:23.627691Z |
| pysec-2018-7 |
|
webhooks/base.py in Anymail (aka django-anymail) before 1.2.1 is prone to a timing attack… | django-anymail | 2018-02-03T21:29:00Z | 2021-06-16T00:03:22.915097Z |
| pysec-2021-96 |
|
This affects the package Flask-Unchained before 0.9.0. When using the the _validate_redir… | flask-unchained | 2021-06-11T00:15:00Z | 2021-06-15T05:47:49.199835Z |
| pysec-2018-6 |
|
An issue was discovered in Django 2.0 before 2.0.3, 1.11 before 1.11.11, and 1.8 before 1… | django | 2018-03-09T20:29:00Z | 2021-06-10T06:52:11.564894Z |
| pysec-2019-142 |
|
In Apache Airflow before 1.10.2, a malicious admin user could edit the state of objects i… | apache-airflow | 2019-02-27T18:29:00Z | 2021-06-10T06:52:05.219935Z |
| pysec-2018-21 |
|
PyCryptodome before 3.6.6 has an integer overflow in the data_len variable in AESNI.c, re… | pycryptodome | 2018-08-20T00:29:00Z | 2021-06-10T06:52:01.279206Z |
| pysec-2018-18 |
|
Jupyter Notebook before 5.7.2 allows XSS via a crafted directory name because notebook/st… | notebook | 2018-11-18T17:29:00Z | 2021-06-10T06:52:01.452566Z |
| pysec-2018-26 |
|
qutebrowser version introduced in v0.11.0 (1179ee7a937fb31414d77d9970bac21095358449) cont… | qutebrowser | 2018-06-26T16:29:00Z | 2021-06-10T06:51:59.879286Z |
| ID | Description | Updated |
|---|---|---|
| gsd-2024-3318 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:27.236261Z |
| gsd-2024-3317 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:27.145606Z |
| gsd-2024-3316 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:27.141466Z |
| gsd-2024-3315 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:27.052577Z |
| gsd-2024-3314 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:27.348327Z |
| gsd-2024-3313 | SUBNET Solutions Inc. has identified vulnerabilities in third-party components used in P… | 2024-04-11T05:03:27.386722Z |
| gsd-2024-3312 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:27.338663Z |
| gsd-2024-3311 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:27.139394Z |
| gsd-2024-3310 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:27.422435Z |
| gsd-2024-3309 | The Qi Addons For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scrip… | 2024-04-11T05:03:27.176161Z |
| gsd-2024-3308 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:27.220288Z |
| gsd-2024-3307 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:27.284596Z |
| gsd-2024-3306 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:27.357680Z |
| gsd-2024-3305 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:27.286112Z |
| gsd-2024-3304 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:27.361839Z |
| gsd-2024-3303 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:27.097037Z |
| gsd-2024-3302 | There was no limit to the number of HTTP/2 CONTINUATION frames that would be processed. A… | 2024-04-11T05:03:27.390670Z |
| gsd-2024-3301 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:27.253061Z |
| gsd-2024-3300 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:27.042831Z |
| gsd-2024-3299 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:27.396244Z |
| gsd-2024-3298 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:27.341830Z |
| gsd-2024-3297 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:27.345334Z |
| gsd-2024-3296 | A timing-based side-channel flaw exists in the rust-openssl package, which could be suffi… | 2024-04-11T05:03:27.430574Z |
| gsd-2024-3295 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:27.172607Z |
| gsd-2024-3294 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:27.266847Z |
| gsd-2024-3293 | The rtMedia for WordPress, BuddyPress and bbPress plugin for WordPress is vulnerable to b… | 2024-04-11T05:03:27.159158Z |
| gsd-2024-3292 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:27.401534Z |
| gsd-2024-3291 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:27.400922Z |
| gsd-2024-3290 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:27.122468Z |
| gsd-2024-3289 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:27.390920Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| MAL-2025-192124 | Malicious code in elf-stats-rooftop-hammer-580 (npm) | 2025-12-03T15:59:29Z | 2025-12-23T21:08:54Z |
| MAL-2025-192123 | Malicious code in elf-stats-rooftop-hammer-362 (npm) | 2025-12-03T15:59:29Z | 2025-12-23T21:08:54Z |
| MAL-2025-191977 | Malicious code in elf-stats-rooftop-stockpile-626 (npm) | 2025-12-03T12:57:17Z | 2025-12-23T21:08:54Z |
| MAL-2025-191976 | Malicious code in elf-stats-sleighing-bow-514 (npm) | 2025-12-03T12:49:19Z | 2025-12-23T21:08:54Z |
| mal-2025-192522 | Malicious code in elf-stats-peppermint-wishlist-307 (npm) | 2025-12-11T19:46:09Z | 2025-12-23T20:41:02Z |
| mal-2025-192520 | Malicious code in elf-stats-nutmeg-candy-869 (npm) | 2025-12-11T19:46:09Z | 2025-12-23T20:41:02Z |
| mal-2025-192514 | Malicious code in elf-stats-merry-cookiejar-796 (npm) | 2025-12-11T19:46:09Z | 2025-12-23T20:41:02Z |
| mal-2025-192334 | Malicious code in elf-stats-midnight-rocket-813 (npm) | 2025-12-05T21:10:10Z | 2025-12-23T20:41:02Z |
| mal-2025-192304 | Malicious code in elf-stats-northbound-sparkler-410 (npm) | 2025-12-04T19:12:07Z | 2025-12-23T20:41:02Z |
| mal-2025-192273 | Malicious code in elf-stats-merry-cookiejar-139 (npm) | 2025-12-03T19:22:08Z | 2025-12-23T20:41:02Z |
| mal-2025-192263 | Malicious code in elf-stats-nutmeg-garland-645 (npm) | 2025-12-03T19:06:00Z | 2025-12-23T20:41:02Z |
| mal-2025-192248 | Malicious code in elf-stats-marzipan-pantry-560 (npm) | 2025-12-03T17:50:51Z | 2025-12-23T20:41:02Z |
| mal-2025-192223 | Malicious code in elf-stats-nutmeg-cocoa-967 (npm) | 2025-12-03T17:20:38Z | 2025-12-23T20:41:02Z |
| mal-2025-192221 | Malicious code in elf-stats-midnight-chimney-291 (npm) | 2025-12-03T17:22:10Z | 2025-12-23T20:41:02Z |
| mal-2025-192220 | Malicious code in elf-stats-merry-cookiejar-646 (npm) | 2025-12-03T17:31:24Z | 2025-12-23T20:41:02Z |
| mal-2025-192219 | Malicious code in elf-stats-merry-cookiejar-511 (npm) | 2025-12-03T17:31:24Z | 2025-12-23T20:41:02Z |
| mal-2025-192201 | Malicious code in elf-stats-merry-garland-548 (npm) | 2025-12-03T16:32:02Z | 2025-12-23T20:41:02Z |
| mal-2025-192116 | Malicious code in elf-stats-piney-garland-824 (npm) | 2025-12-03T15:59:29Z | 2025-12-23T20:41:02Z |
| mal-2025-192114 | Malicious code in elf-stats-peppermint-stocking-949 (npm) | 2025-12-03T15:59:29Z | 2025-12-23T20:41:02Z |
| mal-2025-192113 | Malicious code in elf-stats-peppermint-icicle-890 (npm) | 2025-12-03T15:59:29Z | 2025-12-23T20:41:02Z |
| mal-2025-192109 | Malicious code in elf-stats-nutmeg-giftbox-398 (npm) | 2025-12-03T15:59:29Z | 2025-12-23T20:41:02Z |
| mal-2025-192100 | Malicious code in elf-stats-mulled-drum-529 (npm) | 2025-12-03T15:59:29Z | 2025-12-23T20:41:02Z |
| mal-2025-192099 | Malicious code in elf-stats-mistletoe-sparkler-211 (npm) | 2025-12-03T13:02:43Z | 2025-12-23T20:41:02Z |
| mal-2025-192096 | Malicious code in elf-stats-midnight-wreath-655 (npm) | 2025-12-03T15:59:29Z | 2025-12-23T20:41:02Z |
| mal-2025-192095 | Malicious code in elf-stats-midnight-workbench-208 (npm) | 2025-12-03T15:59:29Z | 2025-12-23T20:41:02Z |
| mal-2025-192093 | Malicious code in elf-stats-midnight-star-734 (npm) | 2025-12-03T15:59:29Z | 2025-12-23T20:41:02Z |
| mal-2025-192090 | Malicious code in elf-stats-midnight-drum-606 (npm) | 2025-12-03T15:59:29Z | 2025-12-23T20:41:02Z |
| mal-2025-192087 | Malicious code in elf-stats-merry-cookiejar-915 (npm) | 2025-12-03T15:59:29Z | 2025-12-23T20:41:02Z |
| mal-2025-192083 | Malicious code in elf-stats-marzipan-muffin-733 (npm) | 2025-12-03T15:59:29Z | 2025-12-23T20:41:02Z |
| mal-2025-191975 | Malicious code in elf-stats-merry-cookiejar-987 (npm) | 2025-12-03T12:55:35Z | 2025-12-23T20:41:02Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| wid-sec-w-2024-0844 | Red Hat Enterprise Linux: Schwachstelle in unbound | 2024-04-09T22:00:00.000+00:00 | 2025-01-30T23:00:00.000+00:00 |
| wid-sec-w-2022-1337 | Python: Mehrere Schwachstellen | 2022-09-07T22:00:00.000+00:00 | 2025-01-30T23:00:00.000+00:00 |
| wid-sec-w-2025-0224 | FreeBSD Project FreeBSD OS: Mehrere Schwachstellen | 2025-01-29T23:00:00.000+00:00 | 2025-01-29T23:00:00.000+00:00 |
| wid-sec-w-2025-0222 | Dell NetWorker: Schwachstelle ermöglicht Codeausführung | 2025-01-29T23:00:00.000+00:00 | 2025-01-29T23:00:00.000+00:00 |
| wid-sec-w-2025-0220 | Microsoft GitHub Enterprise: Schwachstelle ermöglicht Offenlegung von Informationen | 2025-01-29T23:00:00.000+00:00 | 2025-01-29T23:00:00.000+00:00 |
| wid-sec-w-2025-0219 | Drupal: Mehrere Schwachstellen | 2025-01-29T23:00:00.000+00:00 | 2025-01-29T23:00:00.000+00:00 |
| wid-sec-w-2025-0215 | Apache Tomcat: Mehrere Schwachstellen | 2016-11-22T23:00:00.000+00:00 | 2025-01-29T23:00:00.000+00:00 |
| wid-sec-w-2025-0214 | Red Hat Enterprise Linux (cloud-init): Schwachstelle ermöglicht Offenlegung von Informationen | 2021-08-10T22:00:00.000+00:00 | 2025-01-29T23:00:00.000+00:00 |
| wid-sec-w-2024-2218 | VLC: Schwachstelle ermöglicht Ausführen von beliebigem Programmcode mit Benutzerrechten oder DoS | 2024-09-25T22:00:00.000+00:00 | 2025-01-29T23:00:00.000+00:00 |
| wid-sec-w-2024-1662 | Mitel SIP-Telefon: Mehrere Schwachstellen ermöglichen Codeausführung | 2024-07-17T22:00:00.000+00:00 | 2025-01-29T23:00:00.000+00:00 |
| wid-sec-w-2024-1208 | Red Hat Enterprise Linux (traceroute): Schwachstelle ermöglicht Denial of Service | 2024-05-21T22:00:00.000+00:00 | 2025-01-29T23:00:00.000+00:00 |
| wid-sec-w-2023-0188 | Trustwave ModSecurity: Mehrere Schwachstellen ermöglichen Umgehen von Sicherheitsvorkehrungen | 2023-01-23T23:00:00.000+00:00 | 2025-01-29T23:00:00.000+00:00 |
| wid-sec-w-2022-0724 | Apache HTTP Server: Mehrere Schwachstellen | 2021-09-16T22:00:00.000+00:00 | 2025-01-29T23:00:00.000+00:00 |
| wid-sec-w-2025-0213 | Perl: Schwachstelle ermöglicht Denial of Service | 2014-09-28T22:00:00.000+00:00 | 2025-01-28T23:00:00.000+00:00 |
| wid-sec-w-2025-0212 | Perl: Schwachstelle ermöglicht Manipulation von Dateien | 2018-06-12T22:00:00.000+00:00 | 2025-01-28T23:00:00.000+00:00 |
| wid-sec-w-2025-0211 | Perl: Mehrere Schwachstellen | 2018-11-29T23:00:00.000+00:00 | 2025-01-28T23:00:00.000+00:00 |
| wid-sec-w-2025-0210 | TYPO3 "oidc" Extension: Schwachstelle ermöglicht Erlangen von Benutzerrechten | 2025-01-28T23:00:00.000+00:00 | 2025-01-28T23:00:00.000+00:00 |
| wid-sec-w-2025-0207 | Red Hat OpenShift (Service Mesh): Mehrere Schwachstellen | 2025-01-28T23:00:00.000+00:00 | 2025-01-28T23:00:00.000+00:00 |
| wid-sec-w-2025-0206 | Rockwell Automation FactoryTalk (View ME): Mehrere Schwachstellen ermöglichen Privilegieneskalation | 2025-01-28T23:00:00.000+00:00 | 2025-01-28T23:00:00.000+00:00 |
| wid-sec-w-2025-0205 | Rockwell Automation FactoryTalk (View SE): Mehrere Schwachstellen | 2025-01-28T23:00:00.000+00:00 | 2025-01-28T23:00:00.000+00:00 |
| wid-sec-w-2024-3657 | Microsoft Windows: Mehrere Schwachstellen | 2024-12-10T23:00:00.000+00:00 | 2025-01-28T23:00:00.000+00:00 |
| wid-sec-w-2024-3476 | Perl: Schwachstelle ermöglicht Codeausführung | 2021-08-09T22:00:00.000+00:00 | 2025-01-28T23:00:00.000+00:00 |
| wid-sec-w-2024-2037 | Perl: Mehrere Schwachstellen ermöglichen Offenlegung von Informationen | 2020-11-19T23:00:00.000+00:00 | 2025-01-28T23:00:00.000+00:00 |
| wid-sec-w-2023-1517 | VLC: mehrere Schwachstellen | 2020-05-17T22:00:00.000+00:00 | 2025-01-28T23:00:00.000+00:00 |
| wid-sec-w-2025-0204 | Red Hat Trusted Profile Analyzer: Schwachstelle ermöglicht nicht spezifizierten Angriff | 2025-01-27T23:00:00.000+00:00 | 2025-01-27T23:00:00.000+00:00 |
| wid-sec-w-2025-0203 | TeamViewer: Schwachstelle ermöglicht Privilegieneskalation | 2025-01-27T23:00:00.000+00:00 | 2025-01-27T23:00:00.000+00:00 |
| wid-sec-w-2025-0199 | Apple Safari: Mehrere Schwachstellen | 2025-01-27T23:00:00.000+00:00 | 2025-01-27T23:00:00.000+00:00 |
| wid-sec-w-2025-0198 | IBM MQ: Schwachstelle ermöglicht Offenlegung von Informationen | 2025-01-27T23:00:00.000+00:00 | 2025-01-27T23:00:00.000+00:00 |
| wid-sec-w-2025-0189 | git: Schwachstelle ermöglicht Offenlegung von Informationen | 2020-04-14T22:00:00.000+00:00 | 2025-01-27T23:00:00.000+00:00 |
| wid-sec-w-2025-0033 | GitLab: Mehrere Schwachstellen | 2025-01-08T23:00:00.000+00:00 | 2025-01-27T23:00:00.000+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| rhsa-2025:22863 | Red Hat Security Advisory: OpenShift Container Platform 4.17.45 CNF IBU extras update | 2025-12-08T16:08:23+00:00 | 2026-02-04T09:40:56+00:00 |
| rhsa-2025:2223 | Red Hat Security Advisory: Red Hat Product OCP Tools 4.12 Openshift Jenkins security update | 2025-03-04T14:40:23+00:00 | 2026-02-04T09:40:54+00:00 |
| rhsa-2025:19357 | Red Hat Security Advisory: OpenShift Container Platform 4.16.51 CNF IBU extras update | 2025-10-30T15:22:05+00:00 | 2026-02-04T09:40:53+00:00 |
| rhsa-2025:19356 | Red Hat Security Advisory: OpenShift Container Platform 4.14.57 CNF IBU extras update | 2025-10-30T15:20:42+00:00 | 2026-02-04T09:40:53+00:00 |
| rhsa-2025:16534 | Red Hat Security Advisory: OpenShift Container Platform 4.12 ztp-site-generate container | 2025-09-23T21:08:07+00:00 | 2026-02-04T09:40:52+00:00 |
| rhsa-2025:14860 | Red Hat Security Advisory: OpenShift Container Platform 4.16.47 security and extras update | 2025-09-03T14:26:28+00:00 | 2026-02-04T09:40:50+00:00 |
| rhsa-2025:15674 | Red Hat Security Advisory: OpenShift Container Platform 4.13.60 security and extras update | 2025-09-18T04:25:22+00:00 | 2026-02-04T09:40:49+00:00 |
| rhsa-2025:15333 | Red Hat Security Advisory: OpenShift Container Platform 4.12.80 security and extras update | 2025-09-11T09:52:22+00:00 | 2026-02-04T09:40:48+00:00 |
| rhsa-2025:14856 | Red Hat Security Advisory: OpenShift Container Platform 4.14.56 security and extras update | 2025-09-04T03:47:46+00:00 | 2026-02-04T09:40:47+00:00 |
| rhsa-2025:14398 | Red Hat Security Advisory: OpenShift Container Platform 4.15.57 security and extras update | 2025-08-27T17:57:53+00:00 | 2026-02-04T09:40:46+00:00 |
| rhsa-2025:14061 | Red Hat Security Advisory: OpenShift Container Platform 4.17.38 security and extras update | 2025-08-27T17:25:43+00:00 | 2026-02-04T09:40:45+00:00 |
| rhsa-2025:14397 | Red Hat Security Advisory: OpenShift Container Platform 4.15.57 bug fix and security update | 2025-08-27T19:02:18+00:00 | 2026-02-04T09:40:44+00:00 |
| rhsa-2025:13849 | Red Hat Security Advisory: OpenShift Container Platform 4.19.9 security and extras update | 2025-08-19T18:04:34+00:00 | 2026-02-04T09:40:42+00:00 |
| rhsa-2025:13338 | Red Hat Security Advisory: OpenShift Container Platform 4.16.46 security and extras update | 2025-08-13T01:45:55+00:00 | 2026-02-04T09:40:41+00:00 |
| rhsa-2025:13327 | Red Hat Security Advisory: OpenShift Container Platform 4.18.22 security and extras update | 2025-08-13T01:15:12+00:00 | 2026-02-04T09:40:41+00:00 |
| rhsa-2025:13291 | Red Hat Security Advisory: OpenShift Container Platform 4.14.55 security and extras update | 2025-08-14T01:26:54+00:00 | 2026-02-04T09:40:40+00:00 |
| rhsa-2025:12439 | Red Hat Security Advisory: OpenShift Container Platform 4.17.37 security and extras update | 2025-08-06T22:53:00+00:00 | 2026-02-04T09:40:39+00:00 |
| rhsa-2025:12372 | Red Hat Security Advisory: OpenShift Container Platform 4.15.56 security and extras update | 2025-08-06T22:56:24+00:00 | 2026-02-04T09:40:39+00:00 |
| rhsa-2025:12325 | Red Hat Security Advisory: OpenShift Container Platform 4.12.79 security and extras update | 2025-08-07T00:32:00+00:00 | 2026-02-04T09:40:38+00:00 |
| rhsa-2025:11681 | Red Hat Security Advisory: OpenShift Container Platform 4.16.45 bug fix and security update | 2025-07-30T13:13:16+00:00 | 2026-02-04T09:40:37+00:00 |
| rhsa-2025:11679 | Red Hat Security Advisory: OpenShift Container Platform 4.18.21 security and extras update | 2025-07-30T19:44:51+00:00 | 2026-02-04T09:40:35+00:00 |
| rhsa-2025:11677 | Red Hat Security Advisory: OpenShift Container Platform 4.18.21 bug fix and security update | 2025-07-30T22:11:17+00:00 | 2026-02-04T09:40:35+00:00 |
| rhsa-2025:11675 | Red Hat Security Advisory: OpenShift Container Platform 4.19.6 security and extras update | 2025-07-29T01:19:50+00:00 | 2026-02-04T09:40:35+00:00 |
| rhsa-2022:7683 | Red Hat Security Advisory: kernel security, bug fix, and enhancement update | 2022-11-08T09:32:56+00:00 | 2026-02-04T09:08:03+00:00 |
| rhsa-2024:6437 | Red Hat Security Advisory: Red Hat build of Quarkus 3.8.6 release and security update | 2024-09-23T14:23:03+00:00 | 2026-02-04T07:33:14+00:00 |
| rhsa-2026:0887 | Red Hat Security Advisory: openssl security update | 2026-01-20T16:12:12+00:00 | 2026-02-04T01:03:37+00:00 |
| rhsa-2026:1720 | Red Hat Security Advisory: openssl security update | 2026-02-02T14:43:39+00:00 | 2026-02-04T01:03:36+00:00 |
| rhsa-2026:1475 | Red Hat Security Advisory: openssl security update | 2026-01-28T09:21:36+00:00 | 2026-02-04T01:03:35+00:00 |
| rhsa-2026:1349 | Red Hat Security Advisory: openssl security update | 2026-01-27T14:02:32+00:00 | 2026-02-04T01:03:34+00:00 |
| rhsa-2026:0714 | Red Hat Security Advisory: openssl security update | 2026-01-15T16:05:10+00:00 | 2026-02-04T01:03:34+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| icsa-20-252-02 | Siemens SIMATIC S7-300 and S7-400 CPUs (Update C) | 2020-09-08T00:00:00.000000Z | 2020-12-08T00:00:00.000000Z |
| icsa-20-224-05 | Siemens SIMATIC, SIMOTICS (Update A) | 2020-08-11T00:00:00.000000Z | 2020-12-08T00:00:00.000000Z |
| icsa-20-161-03 | Siemens LOGO! (Update A) | 2020-06-09T00:00:00.000000Z | 2020-12-08T00:00:00.000000Z |
| icsa-19-134-04 | Siemens LOGO! 8 BM (Update A) | 2019-05-14T00:00:00.000000Z | 2020-12-08T00:00:00.000000Z |
| icsa-19-134-03 | Siemens LOGO! Soft Comfort (Update A) | 2019-05-14T00:00:00.000000Z | 2020-12-08T00:00:00.000000Z |
| icsa-18-165-01 | Siemens SCALANCE X Switches, RUGGEDCOM WiMAX, RFID 181-EIP, and SIMATIC RF182C (Update D) | 2018-06-14T00:00:00.000000Z | 2020-12-08T00:00:00.000000Z |
| icsa-17-243-02 | Siemens LOGO! (Update A) | 2017-08-31T00:00:00.000000Z | 2020-12-08T00:00:00.000000Z |
| icsa-20-338-01 | National Instruments CompactRIO | 2020-12-03T00:00:00.000000Z | 2020-12-03T00:00:00.000000Z |
| icsa-20-238-03 | WECON LeviStudioU (Update C) | 2020-08-25T00:00:00.000000Z | 2020-12-03T00:00:00.000000Z |
| icsa-20-336-01 | Schneider Electric EcoStruxure Operator Terminal Expert runtime (Vijeo XD) | 2020-12-01T00:00:00.000000Z | 2020-12-01T00:00:00.000000Z |
| icsa-20-329-02 | Fuji Electric V-Server Lite | 2020-11-24T00:00:00.000000Z | 2020-11-24T00:00:00.000000Z |
| icsa-20-329-01 | Rockwell Automation FactoryTalk Linx | 2020-11-24T00:00:00.000000Z | 2020-11-24T00:00:00.000000Z |
| icsa-20-324-04 | Schneider Electric Interactive Graphical SCADA System (IGSS) | 2020-11-17T00:00:00.000000Z | 2020-11-17T00:00:00.000000Z |
| icsa-20-324-03 | Real Time Automation EtherNet/IP | 2020-11-17T00:00:00.000000Z | 2020-11-17T00:00:00.000000Z |
| icsa-20-324-01 | Johnson Controls Sensormatic Electronics American Dynamics victor Web Client | 2020-11-17T00:00:00.000000Z | 2020-11-17T00:00:00.000000Z |
| icsma-20-317-01 | BD Alaris 8015 PC Unit and BD Alaris Systems Manager | 2020-11-12T00:00:00.000000Z | 2020-11-12T00:00:00.000000Z |
| icsa-20-317-01 | Mitsubishi Electric MELSEC iQ-R Series | 2020-11-12T00:00:00.000000Z | 2020-11-12T00:00:00.000000Z |
| icsa-20-315-05 | Siemens SCALANCE W 1750D | 2020-11-10T00:00:00.000000Z | 2020-11-10T00:00:00.000000Z |
| icsa-20-315-03 | Schneider Electric PLC Simulator for EcoStruxure Control Expert | 2020-11-10T00:00:00.000000Z | 2020-11-10T00:00:00.000000Z |
| icsa-20-315-02 | OSIsoft PI Vision | 2020-11-10T00:00:00.000000Z | 2020-11-10T00:00:00.000000Z |
| icsa-20-315-01 | ICSA-20-315-01_OSIsoft PI Interface for OPC XML-DA | 2020-11-10T00:00:00.000000Z | 2020-11-10T00:00:00.000000Z |
| icsa-20-310-02 | Mitsubishi Electric GT14 Model of GOT1000 Series | 2020-11-05T00:00:00.000000Z | 2020-11-05T00:00:00.000000Z |
| icsa-20-310-01 | WECON PLC Editor | 2020-11-05T00:00:00.000000Z | 2020-11-05T00:00:00.000000Z |
| icsa-20-308-02 | NEXCOM NIO50 | 2020-11-03T00:00:00.000000Z | 2020-11-03T00:00:00.000000Z |
| icsa-20-303-02 | Mitsubishi Electric MELSEC iQ-R | 2020-10-29T00:00:00.000000Z | 2020-10-29T00:00:00.000000Z |
| icsa-20-301-01 | SHUN HU Technology JUUKO Industrial Radio Remote Control | 2020-10-27T00:00:00.000000Z | 2020-10-27T00:00:00.000000Z |
| icsma-20-296-02 | B. Braun SpaceCom, Battery Pack SP with Wi-Fi, and Data module compactplus | 2020-10-22T00:00:00.000000Z | 2020-10-22T00:00:00.000000Z |
| icsma-20-296-01 | B. Braun OnlineSuite | 2020-10-22T00:00:00.000000Z | 2020-10-22T00:00:00.000000Z |
| icsma-20-196-01 | Capsule Technologies SmartLinx Neuron 2 (Update A) | 2020-07-14T00:00:00.000000Z | 2020-10-20T00:00:00.000000Z |
| icsa-20-294-02 | Hitachi ABB Power Grids XMC20 Multiservice-Multiplexer | 2020-10-20T00:00:00.000000Z | 2020-10-20T00:00:00.000000Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| cisco-sa-tcl-ace-c9kuvkmm | Cisco IOS and IOS XE Software Tcl Arbitrary Code Execution Vulnerability | 2020-06-03T16:00:00+00:00 | 2020-06-03T16:00:00+00:00 |
| cisco-sa-tcl-ace-C9KuVKmm | Cisco IOS and IOS XE Software Tcl Arbitrary Code Execution Vulnerability | 2020-06-03T16:00:00+00:00 | 2020-06-03T16:00:00+00:00 |
| cisco-sa-sxp-68tevzr | Cisco IOS, IOS XE, and NX-OS Software Security Group Tag Exchange Protocol Denial of Service Vulnerability | 2020-06-03T16:00:00+00:00 | 2020-06-03T16:00:00+00:00 |
| cisco-sa-sxp-68TEVzR | Cisco IOS, IOS XE, and NX-OS Software Security Group Tag Exchange Protocol Denial of Service Vulnerability | 2020-06-03T16:00:00+00:00 | 2020-06-03T16:00:00+00:00 |
| cisco-sa-ssh-dos-un22sd2a | Cisco IOS and IOS XE Software Secure Shell Denial of Service Vulnerability | 2020-06-03T16:00:00+00:00 | 2020-06-03T16:00:00+00:00 |
| cisco-sa-ssh-dos-Un22sd2A | Cisco IOS and IOS XE Software Secure Shell Denial of Service Vulnerability | 2020-06-03T16:00:00+00:00 | 2020-06-03T16:00:00+00:00 |
| cisco-sa-snmp-dos-usxsytk5 | Cisco IOS and IOS XE Software Simple Network Management Protocol Denial of Service Vulnerability | 2020-06-03T16:00:00+00:00 | 2020-06-03T16:00:00+00:00 |
| cisco-sa-snmp-dos-USxSyTk5 | Cisco IOS and IOS XE Software Simple Network Management Protocol Denial of Service Vulnerability | 2020-06-03T16:00:00+00:00 | 2020-06-03T16:00:00+00:00 |
| cisco-sa-sip-cv28sqw2 | Cisco IOS and IOS XE Software Session Initiation Protocol Denial of Service Vulnerability | 2020-06-03T16:00:00+00:00 | 2020-06-03T16:00:00+00:00 |
| cisco-sa-sip-Cv28sQw2 | Cisco IOS and IOS XE Software Session Initiation Protocol Denial of Service Vulnerability | 2020-06-03T16:00:00+00:00 | 2020-06-03T16:00:00+00:00 |
| cisco-sa-priv-esc3-gmgngchx | Cisco IOS XE Software Privilege Escalation Vulnerability | 2020-06-03T16:00:00+00:00 | 2020-06-03T16:00:00+00:00 |
| cisco-sa-priv-esc3-GMgnGCHx | Cisco IOS XE Software Privilege Escalation Vulnerability | 2020-06-03T16:00:00+00:00 | 2020-06-03T16:00:00+00:00 |
| cisco-sa-priv-esc2-a6jvru7c | Cisco IOS XE Software Privilege Escalation Vulnerability | 2020-06-03T16:00:00+00:00 | 2020-06-03T16:00:00+00:00 |
| cisco-sa-priv-esc2-A6jVRu7C | Cisco IOS XE Software Privilege Escalation Vulnerability | 2020-06-03T16:00:00+00:00 | 2020-06-03T16:00:00+00:00 |
| cisco-sa-priv-esc1-okmkfrhv | Cisco IOS XE Software Privilege Escalation Vulnerability | 2020-06-03T16:00:00+00:00 | 2020-06-03T16:00:00+00:00 |
| cisco-sa-priv-esc1-OKMKFRhV | Cisco IOS XE Software Privilege Escalation Vulnerability | 2020-06-03T16:00:00+00:00 | 2020-06-03T16:00:00+00:00 |
| cisco-sa-ngwc-cmdinj-kewwvwr | Cisco IOS XE Software Command Injection Vulnerability | 2020-06-03T16:00:00+00:00 | 2020-06-03T16:00:00+00:00 |
| cisco-sa-ngwc-cmdinj-KEwWVWR | Cisco IOS XE Software Command Injection Vulnerability | 2020-06-03T16:00:00+00:00 | 2020-06-03T16:00:00+00:00 |
| cisco-sa-ise-dos-qnzq39k7 | Cisco Identity Services Engine Denial of Service Vulnerability | 2020-06-03T16:00:00+00:00 | 2020-06-03T16:00:00+00:00 |
| cisco-sa-ise-dos-qNzq39K7 | Cisco Identity Services Engine Denial of Service Vulnerability | 2020-06-03T16:00:00+00:00 | 2020-06-03T16:00:00+00:00 |
| cisco-sa-ioxxss-wc6cquws | Cisco IOx Application Framework Local Manager Stored Cross-Site Scripting Vulnerability | 2020-06-03T16:00:00+00:00 | 2020-06-03T16:00:00+00:00 |
| cisco-sa-ioxxss-wc6CqUws | Cisco IOx Application Framework Local Manager Stored Cross-Site Scripting Vulnerability | 2020-06-03T16:00:00+00:00 | 2020-06-03T16:00:00+00:00 |
| cisco-sa-ioxpe-kggvcaf9 | Cisco IOx for IOS XE Software Privilege Escalation Vulnerability | 2020-06-03T16:00:00+00:00 | 2020-06-03T16:00:00+00:00 |
| cisco-sa-ioxPE-KgGvCAf9 | Cisco IOx for IOS XE Software Privilege Escalation Vulnerability | 2020-06-03T16:00:00+00:00 | 2020-06-03T16:00:00+00:00 |
| cisco-sa-iosxe-webui-rce-uk8bxcud | Cisco IOS XE Software Web UI Remote Code Execution Vulnerability | 2020-06-03T16:00:00+00:00 | 2020-06-03T16:00:00+00:00 |
| cisco-sa-iosxe-webui-rce-uk8BXcUD | Cisco IOS XE Software Web UI Remote Code Execution Vulnerability | 2020-06-03T16:00:00+00:00 | 2020-06-03T16:00:00+00:00 |
| cisco-sa-iosxe-vpn-dos-edomw28z | Cisco IOS XE Software IPsec VPN Denial of Service Vulnerability | 2020-06-03T16:00:00+00:00 | 2020-06-03T16:00:00+00:00 |
| cisco-sa-iosxe-vpn-dos-edOmW28Z | Cisco IOS XE Software IPsec VPN Denial of Service Vulnerability | 2020-06-03T16:00:00+00:00 | 2020-06-03T16:00:00+00:00 |
| cisco-sa-iosxe-fnfv9-dos-hnd6fc9u | Cisco IOS XE Software Flexible NetFlow Version 9 Denial of Service Vulnerability | 2020-06-03T16:00:00+00:00 | 2020-06-03T16:00:00+00:00 |
| cisco-sa-iosxe-fnfv9-dos-HND6Fc9u | Cisco IOS XE Software Flexible NetFlow Version 9 Denial of Service Vulnerability | 2020-06-03T16:00:00+00:00 | 2020-06-03T16:00:00+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| msrc_cve-2025-8734 | GNU Bison scan-code.c code_free double free | 2025-08-02T00:00:00.000Z | 2025-09-03T22:23:02.000Z |
| msrc_cve-2025-3010 | Khronos Group glslang Intermediate.cpp isConversionAllowed null pointer dereference | 2025-03-02T00:00:00.000Z | 2025-09-03T22:23:00.000Z |
| msrc_cve-2024-40969 | f2fs: don't set RO when shutting down f2fs | 2024-07-01T07:00:00.000Z | 2025-09-03T22:22:53.000Z |
| msrc_cve-2024-35867 | smb: client: fix potential UAF in cifs_stats_proc_show() | 2024-05-02T07:00:00.000Z | 2025-09-03T22:22:53.000Z |
| msrc_cve-2018-1999024 | MathJax version prior to version 2.7.4 contains a Cross Site Scripting (XSS) vulnerability | 2018-07-02T00:00:00.000Z | 2025-09-03T22:22:20.000Z |
| msrc_cve-2020-15254 | Undefined Behavior in bounded Crossbeam channel | 2020-10-02T00:00:00.000Z | 2025-09-03T22:22:18.000Z |
| msrc_cve-2024-40979 | wifi: ath12k: fix kernel crash during resume | 2024-07-01T07:00:00.000Z | 2025-09-03T22:21:56.000Z |
| msrc_cve-2024-49891 | scsi: lpfc: Validate hdwq pointers before dereferencing in reset/errata paths | 2024-10-01T07:00:00.000Z | 2025-09-03T22:21:45.000Z |
| msrc_cve-2024-57075 | A prototype pollution in the lib.Logger function of eazy-logger v4.0.1 allows attackers to cause a Denial of Service (DoS) via supplying a crafted payload. | 2025-02-02T00:00:00.000Z | 2025-09-03T22:21:42.000Z |
| msrc_cve-2025-38618 | vsock: Do not allow binding to VMADDR_PORT_ANY | 2025-08-02T00:00:00.000Z | 2025-09-03T22:21:41.000Z |
| msrc_cve-2022-33967 | squashfs filesystem implementation of U-Boot versions from v2020.10-rc2 to v2022.07-rc5 contains a heap-based buffer overflow vulnerability due to a defect in the metadata reading process. Loading a specially crafted squashfs image may lead to a denial-of-service (DoS) condition or arbitrary code execution. | 2022-07-02T00:00:00.000Z | 2025-09-03T22:21:10.000Z |
| msrc_cve-2025-8733 | GNU Bison obprintf.c __obstack_vprintf_internal assertion | 2025-08-02T00:00:00.000Z | 2025-09-03T22:20:27.000Z |
| msrc_cve-2024-40973 | media: mtk-vcodec: potential null pointer deference in SCP | 2024-07-01T07:00:00.000Z | 2025-09-03T22:20:26.000Z |
| msrc_cve-2024-35868 | smb: client: fix potential UAF in cifs_stats_proc_write() | 2024-05-02T07:00:00.000Z | 2025-09-03T22:20:06.000Z |
| msrc_cve-2024-26853 | igc: avoid returning frame twice in XDP_REDIRECT | 2024-04-02T07:00:00.000Z | 2025-09-03T22:19:52.000Z |
| msrc_cve-2025-38671 | i2c: qup: jump out of the loop in case of timeout | 2025-08-02T00:00:00.000Z | 2025-09-03T22:19:35.000Z |
| msrc_cve-2024-43846 | lib: objagg: Fix general protection fault | 2024-08-02T00:00:00.000Z | 2025-09-03T22:18:52.000Z |
| msrc_cve-2023-52979 | squashfs: harden sanity check in squashfs_read_xattr_id_table | 2025-03-02T00:00:00.000Z | 2025-09-03T22:18:39.000Z |
| msrc_cve-2025-47907 | Incorrect results returned from Rows.Scan in database/sql | 2025-08-02T00:00:00.000Z | 2025-09-03T22:18:29.000Z |
| msrc_cve-2024-6604 | Memory safety bugs present in Firefox 127, Firefox ESR 115.12, and Thunderbird 115.12. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 128, Firefox ESR < 115.13, Thunderbird < 115.13, and Thunderbird < 128. | 2024-07-01T07:00:00.000Z | 2025-09-03T22:18:21.000Z |
| msrc_cve-2024-35929 | rcu/nocb: Fix WARN_ON_ONCE() in the rcu_nocb_bypass_lock() | 2024-05-02T07:00:00.000Z | 2025-09-03T22:17:39.000Z |
| msrc_cve-2025-27810 | Mbed TLS before 2.28.10 and 3.x before 3.6.3, in some cases of failed memory allocation or hardware errors, uses uninitialized stack memory to compose the TLS Finished message, potentially leading to authentication bypasses such as replays. | 2025-03-02T00:00:00.000Z | 2025-09-03T22:17:37.000Z |
| msrc_cve-2023-52589 | media: rkisp1: Fix IRQ disable race issue | 2024-03-02T08:00:00.000Z | 2025-09-03T22:17:34.000Z |
| msrc_cve-2022-49123 | ath11k: Fix frames flush failure caused by deadlock | 2025-02-02T00:00:00.000Z | 2025-09-03T22:16:58.000Z |
| msrc_cve-2025-38665 | can: netlink: can_changelink(): fix NULL pointer deref of struct can_priv::do_set_mode | 2025-08-02T00:00:00.000Z | 2025-09-03T22:16:52.000Z |
| msrc_cve-2019-6290 | An infinite recursion issue was discovered in eval.c in Netwide Assembler (NASM) through 2.14.02. There is a stack exhaustion problem resulting from infinite recursion in the functions expr, rexp, bexpr and cexpr in certain scenarios involving lots of '{' characters. Remote attackers could leverage this vulnerability to cause a denial-of-service via a crafted asm file. | 2019-01-02T00:00:00.000Z | 2025-09-03T22:16:25.000Z |
| msrc_cve-2024-26841 | LoongArch: Update cpu_sibling_map when disabling nonboot CPUs | 2024-04-02T07:00:00.000Z | 2025-09-03T22:16:15.000Z |
| msrc_cve-2023-52590 | ocfs2: Avoid touching renamed directory if parent does not change | 2024-03-02T08:00:00.000Z | 2025-09-03T22:15:16.000Z |
| msrc_cve-2023-52812 | drm/amd: check num of link levels when update pcie param | 2024-05-02T07:00:00.000Z | 2025-09-03T22:14:59.000Z |
| msrc_cve-2011-3048 | The png_set_text_2 function in pngset.c in libpng 1.0.x before 1.0.59, 1.2.x before 1.2.49, 1.4.x before 1.4.11, and 1.5.x before 1.5.10 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a crafted text chunk in a PNG image file, which triggers a memory allocation failure that is not properly handled, leading to a heap-based buffer overflow. | 2012-05-02T00:00:00.000Z | 2025-09-03T22:14:56.000Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| opensuse-su-2024:13499-1 | python310-MechanicalSoup-1.3.0-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13498-1 | liblouis-data-3.25.0-2.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13497-1 | krb5-appl-clients-1.0.3-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13496-1 | gio-branding-upstream-2.78.3-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13495-1 | caddy-2.7.6-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13494-1 | libtiff-devel-32bit-4.6.0-3.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13493-1 | python310-pydrive2-1.16.2-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13492-1 | go1.21-1.21.5-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13491-1 | go1.20-1.20.12-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13490-1 | sudo-1.9.15p2-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13489-1 | python310-jupyter-server-2.11.2-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13488-1 | python-2.7.18-41.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13487-1 | frr-8.4-8.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13486-1 | ansible-documentation-2.15.7-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13485-1 | ansible-core-2.15.7-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13484-1 | shotcut-23.11.29-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13483-1 | nodejs-electron-27.1.3-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13482-1 | libvarnishapi3-7.4.2-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13481-1 | ungoogled-chromium-119.0.6045.199-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13480-1 | python310-pandas-2.1.3-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13479-1 | perl-32bit-5.38.2-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13478-1 | avahi-0.8-31.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13477-1 | qbittorrent-4.6.2-2.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13476-1 | avif-tools-1.0.2-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13475-1 | kernel-firmware-all-20231128-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13474-1 | gerbv-2.10.0-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13473-1 | chromedriver-119.0.6045.199-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13472-1 | python310-cryptography-41.0.7-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13471-1 | jcasgen-maven-plugin-3.5.0-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13470-1 | libQt5Bootstrap-devel-static-32bit-5.15.11+kde138-3.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| bit-dotnet-2021-26423 | .NET Core and Visual Studio Denial of Service Vulnerability | 2024-03-06T10:59:59.764Z | 2025-05-20T10:02:07.006Z |
| bit-dotnet-2021-24112 | .NET Core Remote Code Execution Vulnerability | 2024-03-06T11:00:11.617Z | 2025-05-20T10:02:07.006Z |
| bit-dotnet-2021-1721 | .NET Core and Visual Studio Denial of Service Vulnerability | 2024-03-06T11:00:23.287Z | 2025-05-20T10:02:07.006Z |
| bit-dotnet-2020-8927 | Buffer overflow in Brotli library | 2024-03-06T11:00:33.493Z | 2025-05-20T10:02:07.006Z |
| bit-django-2021-23336 | Web Cache Poisoning | 2024-03-06T10:55:33.071Z | 2025-05-20T10:02:07.006Z |
| bit-discourse-2025-32376 | Discourse DM limits aren’t always properly enforced | 2025-05-02T11:13:20.595Z | 2025-05-20T10:02:07.006Z |
| bit-discourse-2025-24972 | Discourse may bypass user preference when adding users to chat groups | 2025-03-28T09:46:35.742Z | 2025-05-20T10:02:07.006Z |
| bit-discourse-2025-23023 | Anonymous cache poisoning via request headers in Discourse | 2025-02-20T10:31:08.896Z | 2025-05-20T10:02:07.006Z |
| bit-discourse-2024-55948 | Anonymous cache poisoning via XHR requests in Discourse | 2025-02-20T10:31:48.409Z | 2025-05-20T10:02:07.006Z |
| bit-discourse-2024-53994 | Potential bypass of chat permissions in Discourse | 2025-02-20T10:31:56.798Z | 2025-05-20T10:02:07.006Z |
| bit-discourse-2024-47773 | Anonymous cache poisoning via XHR requests in Discourse | 2024-10-11T10:50:34.189Z | 2025-05-20T10:02:07.006Z |
| bit-discourse-2024-47772 | Cross-site Scripting (XSS) via chat excerpts when content security policy (CSP) disabled in Discourse | 2024-10-11T10:50:47.382Z | 2025-05-20T10:02:07.006Z |
| bit-discourse-2024-45297 | Prevent topic list filtering by hidden tags for unauthorized users in Discourse | 2024-10-11T10:50:59.674Z | 2025-05-20T10:02:07.006Z |
| bit-discourse-2024-45051 | Bypass of email address validation via encoded email addresses in Discourse | 2024-10-11T10:51:11.978Z | 2025-05-20T10:02:07.006Z |
| bit-discourse-2024-43789 | Denial of service by the absence of restrictions on replies to posts in Discourse | 2024-10-09T16:26:38.041Z | 2025-05-20T10:02:07.006Z |
| bit-discourse-2024-39320 | Discourse allows iframe injection though default site setting | 2024-08-01T11:17:54.016Z | 2025-05-20T10:02:07.006Z |
| bit-discourse-2024-38360 | Denial of service via Watched Words in Discourse | 2024-07-17T09:56:10.359Z | 2025-05-20T10:02:07.006Z |
| bit-discourse-2024-37299 | Discourse vulnerable to DoS via Tag Group | 2024-08-01T11:18:31.703Z | 2025-05-20T10:02:07.006Z |
| bit-discourse-2024-37165 | Discourse has an XSS via Onebox system | 2024-08-01T11:18:49.407Z | 2025-05-20T10:02:07.006Z |
| bit-discourse-2024-37157 | Discourse vulnerable to Server-Side Request Forgery via FastImage | 2024-07-09T08:42:49.752Z | 2025-05-20T10:02:07.006Z |
| bit-discourse-2024-36122 | Discourse doesn't limit reviewable user serializer payload | 2024-07-09T08:43:07.853Z | 2025-05-20T10:02:07.006Z |
| bit-discourse-2024-36113 | Discourse missing authorization checks for suspending admins/moderators | 2024-07-09T08:43:25.553Z | 2025-05-20T10:02:07.006Z |
| bit-discourse-2024-35234 | Discourse vulnerable to stored-dom XSS via Facebook Oneboxes | 2024-07-09T08:43:42.054Z | 2025-05-20T10:02:07.006Z |
| bit-discourse-2024-35227 | Discourse vulnerable to DoS through Onebox | 2024-07-09T08:44:00.861Z | 2025-05-20T10:02:07.006Z |
| bit-discourse-2024-27100 | Denial of service via Staff Actions in Discourse | 2024-04-01T14:04:13.082Z | 2025-05-20T10:02:07.006Z |
| bit-discourse-2024-27085 | Denial of service through invites in Discourse | 2024-04-01T14:04:24.759Z | 2025-05-20T10:02:07.006Z |
| bit-discourse-2024-24748 | Disclosure of the existence of secret subcategories in Discourse | 2024-04-01T14:04:47.201Z | 2025-05-20T10:02:07.006Z |
| bit-discourse-2024-23834 | Discourse improperly sanitized user input leads to XSS | 2024-03-06T10:51:09.899Z | 2025-05-20T10:02:07.006Z |
| bit-discourse-2024-21655 | Insufficient control of custom field value sizes | 2024-03-06T10:51:21.402Z | 2025-05-20T10:02:07.006Z |
| bit-discourse-2023-49099 | Discourse secure uploads accessible to guests even when login is required | 2024-03-06T10:51:30.801Z | 2025-05-20T10:02:07.006Z |
| ID | Description | Updated |
|---|---|---|
| var-202206-0048 | TOTOLINK EX1200T V4.1.2cu.5215 is affected by a command injection vulnerability that can … | 2024-02-14T22:59:49.346000Z |
| var-202203-1484 | Asus RT-AC68U <3.0.0.4.385.20633 and RT-AC5300 <3.0.0.4.384.82072 are affected by a buffe… | 2024-02-14T22:59:49.664000Z |
| var-200605-0267 | Edimax BR-6104K router allows remote attackers to bypass access restrictions and conduct … | 2024-02-14T22:59:42.483000Z |
| var-201711-0725 | Privilege Escalation on iBall iB-WRA300N3GT iB-WRA300N3GT_1.1.1 devices allows remote aut… | 2024-02-14T22:58:57.532000Z |
| var-201709-0331 | XSS (persistent) on the Intelbras Wireless N 150Mbps router with firmware WRN 240 allows … | 2024-02-14T22:58:57.786000Z |
| var-202001-0302 | A cross-site scripting (XSS) vulnerability in the configuration web interface of the Jina… | 2024-02-14T22:58:54.828000Z |
| var-202201-1106 | Multiple Tenda devices are affected by authentication bypass, such as AC15V1.0 Firmware V… | 2024-02-14T22:58:52.351000Z |
| var-202106-1774 | D-Link DIR-2640-US 1.01B04 is affected by Insufficiently Protected Credentials. D-Link AC… | 2024-02-14T22:57:49.506000Z |
| var-200607-0083 | Siemens Speedstream Wireless Router 2624 allows local users to bypass authentication and … | 2024-02-14T22:56:37.710000Z |
| var-201704-0501 | Huawei UTPS earlier than UTPS-V200R003B015D16SPC00C983 has an unquoted service path vulne… | 2024-02-14T22:55:11.807000Z |
| var-201803-1344 | Bose SoundTouch devices allows remote attackers to achieve remote control via a crafted w… | 2024-02-14T22:55:10.500000Z |
| var-202203-1868 | ASUS AC68U <=3.0.0.4.385.20852 is affected by a buffer overflow in blocking.cgi, which ma… | 2024-02-14T22:54:02.107000Z |
| var-202202-0343 | A DoS attack in the web application of D-Link DIR-X1860 before v1.10WWB09_Beta allows a r… | 2024-02-14T22:54:02.410000Z |
| var-202202-0342 | A reflected cross-site-scripting attack in web application of D-Link DIR-X1860 before v1.… | 2024-02-14T22:54:02.351000Z |
| var-202202-0341 | An HTTP smuggling attack in the web application of D-Link DIR-X1860 before v1.10WWB09_Bet… | 2024-02-14T22:54:02.383000Z |
| var-202402-1352 | Memory corruption in Audio while processing IIR config data from AFE calibration block. 9… | 2024-02-14T22:53:58.474000Z |
| var-201607-0005 | Cisco EPC3928 devices allow remote attackers to obtain sensitive configuration and creden… | 2024-02-14T22:51:04.023000Z |
| var-201607-0003 | goform/WClientMACList on Cisco EPC3928 devices allows remote attackers to cause a denial … | 2024-02-14T22:51:04.068000Z |
| var-201607-0004 | goform/Docsis_system on Cisco EPC3928 devices allows remote attackers to cause a denial o… | 2024-02-14T22:51:03.985000Z |
| var-201803-1343 | Bose SoundTouch devices allow XSS via a crafted public playlist from Spotify. Bose SoundT… | 2024-02-14T22:51:01.756000Z |
| var-202402-1245 | Memory corruption in Audio while processing the calibration data returned from ACDB loade… | 2024-02-14T22:50:48.392000Z |
| var-201312-0104 | Cross-site scripting (XSS) vulnerability in the administer interface in the UniFi Control… | 2024-02-14T22:48:53.329000Z |
| var-201702-0690 | An issue was discovered on SendQuick Entera and Avera devices before 2HF16. An attacker c… | 2024-02-14T22:48:49.104000Z |
| var-201702-0689 | An issue was discovered on SendQuick Entera and Avera devices before 2HF16. The applicati… | 2024-02-14T22:48:49.133000Z |
| var-201705-3685 | On Franklin Fueling Systems TS-550 evo 2.3.0.7332 devices, the Guest user, which contains… | 2024-02-14T22:48:48.267000Z |
| var-200607-0487 | Directory traversal vulnerability in FlexWATCH Network Camera 3.0 and earlier allows remo… | 2024-02-14T22:47:51.440000Z |
| var-200607-0486 | Cross-site scripting (XSS) vulnerability in index.php in FlexWATCH Network Camera 3.0 and… | 2024-02-14T22:47:51.404000Z |
| var-200607-0137 | The "change password forms" in Taskjitsu before 2.0.1 includes password hashes in hidden … | 2024-02-14T22:47:51.594000Z |
| var-201105-0050 | Directory traversal vulnerability in cwhp/auditLog.do in the Homepage Auditing component … | 2024-02-14T22:47:00.334000Z |
| var-201105-0049 | Cross-site scripting (XSS) vulnerability in CSCOnm/servlet/com.cisco.nm.help.ServerHelpEn… | 2024-02-14T22:47:00.371000Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| jvndb-2008-001348 | Groupmax World Wide Web Desktop/BUNSHOKANRI(=DocumentManagement) Cross-Site Scripting Vulnerability | 2008-06-06T12:00+09:00 | 2008-06-06T12:00+09:00 |
| jvndb-2008-001347 | JP1/Cm2/Network Node Manager Web Coordinated Function Multiple Vulnerabilities | 2008-06-06T12:00+09:00 | 2008-06-06T12:00+09:00 |
| jvndb-2008-001313 | JP1/Cm2/Network Node Manager Denial of Service Vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T11:34+09:00 |
| jvndb-2008-000027 | Cross-site scripting vulnerabilities in multiple Bluemoon Inc. XOOPS modules | 2008-05-21T00:00+09:00 | 2008-05-21T11:34+09:00 |
| jvndb-2008-000023 | Sony mylo COM-2 does not verify server SSL certificate | 2008-05-21T00:00+09:00 | 2008-05-21T11:34+09:00 |
| jvndb-2008-000022 | Lhaplus buffer overflow vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T11:33+09:00 |
| jvndb-2008-000020 | DesignForm cross-site scripting vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T11:33+09:00 |
| jvndb-2008-000019 | PerlMailer cross-site scripting vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T11:33+09:00 |
| jvndb-2008-000017 | Multiple I-O DATA DEVICE wireless LAN routers default configuration does not set authentication | 2008-05-21T00:00+09:00 | 2008-05-21T11:32+09:00 |
| jvndb-2008-000015 | BFup ActiveX Control buffer overflow vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T11:32+09:00 |
| jvndb-2008-000013 | FTP bounce vulnerability in multiple Canon digital multifunction copiers and laser beam printers | 2008-05-21T00:00+09:00 | 2008-05-21T11:31+09:00 |
| jvndb-2008-000010 | Google Desktop cross-site scripting vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T11:31+09:00 |
| jvndb-2008-000004 | Zimbra Collaboration Suite script execution vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T11:30+09:00 |
| jvndb-2008-000003 | MTCMS WYSIWYG Editor cross-site scripting vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T11:30+09:00 |
| jvndb-2008-001150 | JP1/HIBUN Encryption/Decryption and Removable Media Control Malfunction Problems | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2008-001097 | SEWB3/PLATFORM Denial of Service Vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2008-001096 | EUR Print Manager Denial of Service Vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2008-000014 | Nagios cross-site scripting vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2008-000012 | Cross-site scripting vulnerability in multiple Tor World CGI scripts | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2008-000011 | Internet Scanner reporting engine vulnerable to cross-site scripting | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2008-000008 | PC2M cross-site scripting vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2008-000007 | RaidenHTTPD cross-site scripting vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2008-000006 | Cross-site scripting vulnerabilities in multiple Hal Networks shopping cart products | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2008-000005 | Multiple Yamaha routers vulnerable to cross-site request forgery | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2008-000001 | Multiple JustSystems products vulnerable to buffer overflow | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2007-001133 | Cosminexus Component Container Session Handling Vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2007-001092 | JP1/Cm2/Network Node Manager Arbitrary Code Execution Vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2007-001091 | Cosminexus Application Server Incorrect Group Permission Handling Vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2007-001000 | Hitachi JP1/File Transmission Server/FTP Denial of Service Vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2007-000999 | Hitachi JP1/File Transmission Server/FTP Authentication Bypass Vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| suse-su-2025:1420-1 | Security update for redis | 2025-04-30T12:55:40Z | 2025-04-30T12:55:40Z |
| suse-su-2025:1419-1 | Security update for redis | 2025-04-30T12:55:00Z | 2025-04-30T12:55:00Z |
| suse-su-2025:1418-1 | Security update for the Linux Kernel (Live Patch 52 for SLE 15 SP3) | 2025-04-30T12:09:46Z | 2025-04-30T12:09:46Z |
| suse-su-2025:20216-1 | Security update for containerd | 2025-04-30T09:17:09Z | 2025-04-30T09:17:09Z |
| suse-su-2025:1416-1 | Security update for the Linux Kernel (Live Patch 50 for SLE 15 SP3) | 2025-04-30T09:10:35Z | 2025-04-30T09:10:35Z |
| suse-su-2025:1414-1 | Security update for MozillaFirefox | 2025-04-30T06:59:24Z | 2025-04-30T06:59:24Z |
| suse-su-2025:1413-1 | Security update for augeas | 2025-04-30T06:59:12Z | 2025-04-30T06:59:12Z |
| suse-su-2025:1408-1 | Security update for the Linux Kernel (Live Patch 64 for SLE 12 SP5) | 2025-04-29T23:17:49Z | 2025-04-29T23:17:49Z |
| suse-su-2025:1403-1 | Security update for the Linux Kernel (Live Patch 56 for SLE 12 SP5) | 2025-04-29T23:17:20Z | 2025-04-29T23:17:20Z |
| suse-su-2025:1402-1 | Security update for the Linux Kernel (Live Patch 60 for SLE 12 SP5) | 2025-04-29T19:10:57Z | 2025-04-29T19:10:57Z |
| suse-su-2025:1399-1 | Security update for java-11-openjdk | 2025-04-29T13:35:08Z | 2025-04-29T13:35:08Z |
| suse-su-2025:20212-1 | Security update for kernel-livepatch-MICRO-6-0-RT_Update_3 | 2025-04-29T11:24:25Z | 2025-04-29T11:24:25Z |
| suse-su-2025:20211-1 | Security update for kernel-livepatch-MICRO-6-0-RT_Update_2 | 2025-04-29T11:24:25Z | 2025-04-29T11:24:25Z |
| suse-su-2025:20315-1 | Security update for kernel-livepatch-MICRO-6-0_Update_4 | 2025-04-29T11:22:27Z | 2025-04-29T11:22:27Z |
| suse-su-2025:20215-1 | Security update for kernel-livepatch-MICRO-6-0_Update_4 | 2025-04-29T11:22:27Z | 2025-04-29T11:22:27Z |
| suse-su-2025:20214-1 | Security update for kernel-livepatch-MICRO-6-0_Update_3 | 2025-04-29T11:22:27Z | 2025-04-29T11:22:27Z |
| suse-su-2025:20314-1 | Security update for kernel-livepatch-MICRO-6-0_Update_2 | 2025-04-29T11:20:13Z | 2025-04-29T11:20:13Z |
| suse-su-2025:20213-1 | Security update for kernel-livepatch-MICRO-6-0_Update_2 | 2025-04-29T11:20:13Z | 2025-04-29T11:20:13Z |
| suse-su-2025:20210-1 | Security update for elemental-toolkit | 2025-04-29T11:13:15Z | 2025-04-29T11:13:15Z |
| suse-su-2025:20209-1 | Security update for gpg2 | 2025-04-29T11:11:44Z | 2025-04-29T11:11:44Z |
| suse-su-2025:20219-1 | Security update for u-boot | 2025-04-29T11:10:08Z | 2025-04-29T11:10:08Z |
| suse-su-2025:20207-1 | Security update for expat | 2025-04-29T11:07:45Z | 2025-04-29T11:07:45Z |
| suse-su-2025:20297-1 | Security update for gnutls | 2025-04-29T10:18:50Z | 2025-04-29T10:18:50Z |
| suse-su-2025:1392-1 | Security update for the Linux Kernel RT (Live Patch 6 for SLE 15 SP6) | 2025-04-28T13:41:00Z | 2025-04-28T13:41:00Z |
| suse-su-2025:1387-1 | Security update for the Linux Kernel RT (Live Patch 5 for SLE 15 SP6) | 2025-04-28T13:10:55Z | 2025-04-28T13:10:55Z |
| suse-su-2025:1385-1 | Security update for the Linux Kernel RT (Live Patch 0 for SLE 15 SP6) | 2025-04-28T13:10:49Z | 2025-04-28T13:10:49Z |
| suse-su-2025:1381-1 | Security update for cifs-utils | 2025-04-28T07:37:13Z | 2025-04-28T07:37:13Z |
| suse-su-2025:1380-1 | Security update for libraw | 2025-04-28T07:36:42Z | 2025-04-28T07:36:42Z |
| suse-su-2025:1374-1 | Security update for runc | 2025-04-25T12:39:27Z | 2025-04-25T12:39:27Z |
| suse-su-2025:20206-1 | Security update for the Linux Kernel | 2025-04-25T09:37:28Z | 2025-04-25T09:37:28Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| cnvd-2025-24722 | WordPress插件WP BookWidgets跨站脚本漏洞 | 2025-10-21 | 2025-10-24 |
| cnvd-2025-24721 | Samsung Notes信息泄露漏洞(CNVD-2025-24721) | 2021-06-17 | 2025-10-24 |
| cnvd-2025-24720 | Samsung Notes libSPenBase缓冲区溢出漏洞(CNVD-2025-24720) | 2021-10-13 | 2025-10-24 |
| cnvd-2025-24719 | SAMSUNG Notes越界读取漏洞(CNVD-2025-24719) | 2025-03-13 | 2025-10-24 |
| cnvd-2025-24718 | SAMSUNG Notes越界读取漏洞(CNVD-2025-24718) | 2025-03-13 | 2025-10-24 |
| cnvd-2025-24717 | SAMSUNG Notes越界读取漏洞(CNVD-2025-24717) | 2025-03-13 | 2025-10-24 |
| cnvd-2025-24716 | SAMSUNG Notes越界读取漏洞(CNVD-2025-24716) | 2025-03-13 | 2025-10-24 |
| cnvd-2025-24715 | SAMSUNG Notes越界读入漏洞(CNVD-2025-24715) | 2025-03-13 | 2025-10-24 |
| cnvd-2025-24714 | SAMSUNG Notes越界读取漏洞(CNVD-2025-24714) | 2025-03-13 | 2025-10-24 |
| cnvd-2025-24713 | SAMSUNG Notes越界读取漏洞(CNVD-2025-24713) | 2025-03-13 | 2025-10-24 |
| cnvd-2025-24712 | SAMSUNG Notes越界读漏洞(CNVD-2025-24712) | 2025-05-12 | 2025-10-24 |
| cnvd-2025-24711 | SAMSUNG Notes存在未明漏洞 | 2025-05-14 | 2025-10-24 |
| cnvd-2025-24710 | SAMSUNG Notes信息泄露漏洞(CNVD-2025-24710) | 2025-09-05 | 2025-10-24 |
| cnvd-2025-24709 | SAMSUNG Notes信息泄露漏洞(CNVD-2025-24709) | 2025-09-05 | 2025-10-24 |
| cnvd-2025-24708 | SAMSUNG Notes信息泄露漏洞 | 2025-10-21 | 2025-10-24 |
| cnvd-2025-24707 | SAMSUNG Notes越界写入漏洞 | 2025-10-21 | 2025-10-24 |
| cnvd-2025-25473 | IBM Aspera信息泄露漏洞(CNVD-2025-25473) | 2025-10-21 | 2025-10-23 |
| cnvd-2025-25472 | IBM Aspera Faspex输入验证错误漏洞 | 2025-10-21 | 2025-10-23 |
| cnvd-2025-25375 | Apache Geode跨站请求伪造漏洞(CNVD-2025-25375) | 2025-10-23 | 2025-10-23 |
| cnvd-2025-24803 | Microsoft Windows SMB Client授权问题漏洞 | 2025-10-17 | 2025-10-23 |
| cnvd-2025-24793 | Fortinet FortiDLP路径遍历漏洞 | 2025-10-21 | 2025-10-23 |
| cnvd-2025-24787 | Emlog跨站脚本漏洞(CNVD-2025-24787) | 2025-10-21 | 2025-10-23 |
| cnvd-2025-24757 | Beauty Parlour Management System customer-list.php文件SQL注入漏洞 | 2025-10-13 | 2025-10-23 |
| cnvd-2025-24756 | OpenBao资源管理错误漏洞 | 2025-10-23 | 2025-10-23 |
| cnvd-2025-24755 | ChurchCRM路径遍历漏洞 | 2025-10-23 | 2025-10-23 |
| cnvd-2025-24733 | ChurchCRM反序列化漏洞 | 2025-10-23 | 2025-10-23 |
| cnvd-2025-24732 | ChanCMS /cms/model/hasUse文件SQL注入漏洞 | 2025-10-23 | 2025-10-23 |
| cnvd-2025-24731 | ChanCMS /cms/article/update文件SQL注入漏洞 | 2025-10-23 | 2025-10-23 |
| cnvd-2025-24730 | IBM Transformation Extender Advanced日志信息泄露漏洞 | 2025-10-21 | 2025-10-23 |
| cnvd-2025-24729 | Palo Alto Networks PAN-OS存在未明漏洞(CNVD-2025-24729) | 2025-10-21 | 2025-10-23 |
| ID | Description | Published | Updated |
|---|---|---|---|
| CERTFR-2024-AVI-0927 | Multiples vulnérabilités dans les produits Synology | 2024-10-28T00:00:00.000000 | 2024-10-28T00:00:00.000000 |
| certfr-2024-avi-0926 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2024-10-25T00:00:00.000000 | 2024-10-25T00:00:00.000000 |
| certfr-2024-avi-0925 | Multiples vulnérabilités dans le noyau Linux de Red Hat | 2024-10-25T00:00:00.000000 | 2024-10-25T00:00:00.000000 |
| certfr-2024-avi-0924 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2024-10-25T00:00:00.000000 | 2024-10-25T00:00:00.000000 |
| certfr-2024-avi-0923 | Multiples vulnérabilités dans les produits IBM | 2024-10-25T00:00:00.000000 | 2024-10-25T00:00:00.000000 |
| certfr-2024-avi-0922 | Multiples vulnérabilités dans Microsoft Edge | 2024-10-25T00:00:00.000000 | 2024-10-25T00:00:00.000000 |
| CERTFR-2024-AVI-0926 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2024-10-25T00:00:00.000000 | 2024-10-25T00:00:00.000000 |
| CERTFR-2024-AVI-0925 | Multiples vulnérabilités dans le noyau Linux de Red Hat | 2024-10-25T00:00:00.000000 | 2024-10-25T00:00:00.000000 |
| CERTFR-2024-AVI-0924 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2024-10-25T00:00:00.000000 | 2024-10-25T00:00:00.000000 |
| CERTFR-2024-AVI-0923 | Multiples vulnérabilités dans les produits IBM | 2024-10-25T00:00:00.000000 | 2024-10-25T00:00:00.000000 |
| CERTFR-2024-AVI-0922 | Multiples vulnérabilités dans Microsoft Edge | 2024-10-25T00:00:00.000000 | 2024-10-25T00:00:00.000000 |
| certfr-2024-avi-0921 | Vulnérabilité dans les produits Microsoft | 2024-10-24T00:00:00.000000 | 2024-10-24T00:00:00.000000 |
| certfr-2024-avi-0920 | Vulnérabilité dans Microsoft Azure | 2024-10-24T00:00:00.000000 | 2024-10-24T00:00:00.000000 |
| certfr-2024-avi-0919 | Multiples vulnérabilités dans les produits Cisco | 2024-10-24T00:00:00.000000 | 2024-10-24T00:00:00.000000 |
| certfr-2024-avi-0918 | Multiples vulnérabilités dans GitLab | 2024-10-24T00:00:00.000000 | 2024-10-24T00:00:00.000000 |
| certfr-2024-avi-0917 | Vulnérabilité dans Fortinet FortiManager | 2024-10-23T00:00:00.000000 | 2024-10-24T00:00:00.000000 |
| CERTFR-2024-AVI-0921 | Vulnérabilité dans les produits Microsoft | 2024-10-24T00:00:00.000000 | 2024-10-24T00:00:00.000000 |
| CERTFR-2024-AVI-0920 | Vulnérabilité dans Microsoft Azure | 2024-10-24T00:00:00.000000 | 2024-10-24T00:00:00.000000 |
| CERTFR-2024-AVI-0919 | Multiples vulnérabilités dans les produits Cisco | 2024-10-24T00:00:00.000000 | 2024-10-24T00:00:00.000000 |
| CERTFR-2024-AVI-0918 | Multiples vulnérabilités dans GitLab | 2024-10-24T00:00:00.000000 | 2024-10-24T00:00:00.000000 |
| CERTFR-2024-AVI-0917 | Vulnérabilité dans Fortinet FortiManager | 2024-10-23T00:00:00.000000 | 2024-10-24T00:00:00.000000 |
| certfr-2024-avi-0916 | Multiples vulnérabilités dans le greffon pour Office 365 de Splunk | 2024-10-23T00:00:00.000000 | 2024-10-23T00:00:00.000000 |
| certfr-2024-avi-0915 | Multiples vulnérabilités dans les produits Centreon | 2024-10-23T00:00:00.000000 | 2024-10-23T00:00:00.000000 |
| certfr-2024-avi-0914 | Vulnérabilité dans les produits Spring | 2024-10-23T00:00:00.000000 | 2024-10-23T00:00:00.000000 |
| certfr-2024-avi-0913 | Multiples vulnérabilités dans Google Chrome | 2024-10-23T00:00:00.000000 | 2024-10-23T00:00:00.000000 |
| certfr-2024-avi-0912 | Multiples vulnérabilités dans Liferay | 2024-10-23T00:00:00.000000 | 2024-10-23T00:00:00.000000 |
| CERTFR-2024-AVI-0916 | Multiples vulnérabilités dans le greffon pour Office 365 de Splunk | 2024-10-23T00:00:00.000000 | 2024-10-23T00:00:00.000000 |
| CERTFR-2024-AVI-0915 | Multiples vulnérabilités dans les produits Centreon | 2024-10-23T00:00:00.000000 | 2024-10-23T00:00:00.000000 |
| CERTFR-2024-AVI-0914 | Vulnérabilité dans les produits Spring | 2024-10-23T00:00:00.000000 | 2024-10-23T00:00:00.000000 |
| CERTFR-2024-AVI-0913 | Multiples vulnérabilités dans Google Chrome | 2024-10-23T00:00:00.000000 | 2024-10-23T00:00:00.000000 |