Recent vulnerabilities


ID CVSS Description Vendor Product Published Updated
CVE-2025-62904
5.4 (3.1)
WordPress WP Geo plugin <= 3.5.1 - Cross Site Scriptin… Ben Huson
WP Geo
2025-10-27T01:33:51.339Z 2026-01-20T14:28:16.653Z
CVE-2025-62903
5.4 (3.1)
WordPress WPC Smart Messages for WooCommerce plugin <=… WPClever
WPC Smart Messages for WooCommerce
2025-10-27T01:33:50.952Z 2026-01-20T14:28:16.645Z
CVE-2025-62902
7.5 (3.1)
WordPress WP Popup Builder plugin <= 1.3.6 - Sensitive… ThemeHunk
WP Popup Builder
2025-10-27T01:33:50.531Z 2026-01-20T14:28:16.982Z
CVE-2025-62901
6.5 (3.1)
WordPress WP Microdata plugin <= 1.0 - Cross Site Scri… Tormorten
WP Microdata
2025-12-21T21:11:56.857Z 2026-01-20T14:28:16.660Z
CVE-2025-62900
5.4 (3.1)
WordPress Popular Posts by Webline plugin <= 1.1.1 - C… WeblineIndia
Popular Posts by Webline
2025-10-27T01:33:50.140Z 2026-01-20T14:28:16.667Z
CVE-2025-62898
5.4 (3.1)
WordPress Links shortcode plugin <= 1.8.3 - Cross Site… Maarten
Links shortcode
2025-10-27T01:33:49.376Z 2026-01-20T14:28:16.664Z
CVE-2025-62897
5.3 (3.1)
WordPress WP Recipe Maker plugin <= 10.1.1 - Content I… Brecht
WP Recipe Maker
2025-10-27T01:33:49.016Z 2026-01-20T14:28:16.579Z
CVE-2025-62896
8.8 (3.1)
WordPress Multilang Contact Form plugin <= 1.5 - Cross… digitaldonkey
Multilang Contact Form
2025-10-27T01:33:48.644Z 2026-01-20T14:28:16.638Z
CVE-2025-62895
7.5 (3.1)
WordPress Atarim plugin <= 4.2 - Sensitive Data Exposu… Vito Peleg
Atarim
2025-10-27T01:33:48.249Z 2026-01-20T14:28:16.515Z
CVE-2025-62894
5.4 (3.1)
WordPress ACF Recent Posts Widget plugin <= 5.9.3 - Cr… magicoders
ACF Recent Posts Widget
2025-10-27T01:33:47.856Z 2026-01-20T14:28:16.537Z
CVE-2025-62892
9.1 (3.1)
WordPress Sunshine Photo Cart plugin <= 3.5.3 - Broken… sunshinephotocart
Sunshine Photo Cart
2025-10-27T01:33:47.085Z 2026-01-20T14:28:16.510Z
CVE-2025-62891
8.8 (3.1)
WordPress Off-Canvas Sidebars & Menus (Slidebars) plug… Jory Hogeveen
Off-Canvas Sidebars & Menus (Slidebars)
2025-10-27T01:33:46.691Z 2026-01-20T14:28:16.451Z
CVE-2025-62890
8.8 (3.1)
WordPress Premmerce Brands for WooCommerce plugin <= 1… Premmerce
Premmerce Brands for WooCommerce
2025-10-27T01:33:46.308Z 2026-01-20T14:28:16.461Z
CVE-2025-62889
8.8 (3.1)
WordPress King Addons for Elementor plugin <= 51.1.37 … KingAddons.com
King Addons for Elementor
2025-10-27T01:33:45.909Z 2026-01-20T14:28:16.379Z
CVE-2025-62888
5.4 (3.1)
WordPress WP Attachments plugin <= 5.2 - Broken Access… Marco Milesi
WP Attachments
2025-12-31T14:17:55.113Z 2026-01-20T14:28:16.341Z
CVE-2025-62887
5.4 (3.1)
WordPress King Addons for Elementor plugin <= 51.1.37 … KingAddons.com
King Addons for Elementor
2025-10-27T01:33:45.420Z 2026-01-20T14:28:16.351Z
CVE-2025-62886
8.8 (3.1)
WordPress Pricing Table builder plugin <= 1.5.1 - Cros… wpdevart
Pricing Table builder
2025-10-27T01:33:44.741Z 2026-01-20T14:28:16.371Z
CVE-2025-62885
6.5 (3.1)
WordPress WP VR plugin <= 8.5.42 - Cross Site Scriptin… RexTheme
WP VR
2025-10-27T01:33:44.357Z 2026-01-20T14:28:16.346Z
CVE-2025-62884
5.3 (3.1)
WordPress Coupon Affiliates plugin <= 7.0.3 - Broken A… Elliot Sowersby / RelyWP
Coupon Affiliates
2025-10-27T01:33:43.969Z 2026-01-20T14:28:16.310Z
CVE-2025-62883
4.3 (3.1)
WordPress Premmerce User Roles plugin <= 1.0.13 - Brok… Premmerce
Premmerce User Roles
2025-10-27T01:33:43.581Z 2026-01-20T14:28:16.387Z
CVE-2025-62882
4.3 (3.1)
WordPress Seriously Simple Podcasting plugin <= 3.13.0… Craig Hewitt
Seriously Simple Podcasting
2025-10-27T01:33:43.191Z 2026-01-20T14:28:16.318Z
CVE-2025-62881
4.3 (3.1)
WordPress WP-Lister Lite for eBay plugin <= 3.8.3 - Br… WP Lab
WP-Lister Lite for eBay
2025-10-27T01:33:42.812Z 2026-01-20T14:28:16.411Z
CVE-2025-62880
4.3 (3.1)
WordPress Custom 404 Pro plugin <= 3.12.0 - Cross Site… Kunal Nagar
Custom 404 Pro
2025-12-22T09:31:35.354Z 2026-01-20T14:28:16.367Z
CVE-2025-62874
4.3 (3.1)
WordPress AnyComment plugin <= 0.3.6 - Broken Access C… Alexander
AnyComment
2025-12-31T16:42:24.180Z 2026-01-20T14:28:16.295Z
CVE-2025-62873
4.3 (3.1)
WordPress WP Flashy Marketing Automation plugin <= 2.0… Flashyapp
WP Flashy Marketing Automation
2025-12-09T14:52:25.051Z 2026-01-20T14:28:16.351Z
CVE-2025-62872
4.3 (3.1)
WordPress Social Photo Fetcher plugin <= 3.0.4 - Cross… JK
Social Photo Fetcher
2025-12-09T14:52:24.849Z 2026-01-20T14:28:16.381Z
CVE-2025-62871
4.3 (3.1)
WordPress Just TinyMCE Custom Styles plugin <= 1.2.1 -… Alex Prokopenko / JustCoded
Just TinyMCE Custom Styles
2025-12-09T14:52:24.656Z 2026-01-20T14:28:16.345Z
CVE-2025-62870
5.3 (3.1)
WordPress Eupago Gateway For Woocommerce plugin <= 4.6… Eupago
Eupago Gateway For Woocommerce
2025-12-09T14:52:24.458Z 2026-01-20T14:28:16.371Z
CVE-2025-62869
4.3 (3.1)
WordPress Gravitec.net – Web Push Notifications plugin… Gravitec.net - Web Push Notifications
Gravitec.net &#8211; Web Push Notifications
2025-12-09T14:52:24.237Z 2026-01-20T14:28:16.320Z
CVE-2025-62868
8.1 (3.1)
WordPress Edge CPT plugin <= 1.4 - Local File Inclusio… Edge-Themes
Edge CPT
2025-10-24T07:52:58.711Z 2026-01-20T14:28:16.105Z
ID CVSS Description Vendor Product Published Updated
CVE-2025-15236
5.3 (4.0)
4.3 (3.1)
Quanta Computer|QOCA aim AI Medical Cloud Platform - P… Quanta Computer
QOCA aim AI Medical Cloud Platform
2026-01-05T07:38:01.733Z 2026-01-05T21:10:06.305Z
CVE-2025-15237
5.3 (4.0)
4.3 (3.1)
Quanta Computer|QOCA aim AI Medical Cloud Platform - P… Quanta Computer
QOCA aim AI Medical Cloud Platform
2026-01-05T07:42:58.327Z 2026-01-05T21:10:36.302Z
CVE-2025-15235
7.1 (4.0)
6.5 (3.1)
Quanta Computer|QOCA aim AI Medical Cloud Platform - M… Quanta Computer
QOCA aim AI Medical Cloud Platform
2026-01-05T07:25:33.577Z 2026-01-05T21:08:27.800Z
CVE-2025-15240
8.7 (4.0)
8.8 (3.1)
Quanta Computer|QOCA aim AI Medical Cloud Platform - A… Quanta Computer
QOCA aim AI Medical Cloud Platform
2026-01-05T08:18:15.343Z 2026-01-05T21:13:47.826Z
CVE-2025-15238
7.1 (4.0)
6.5 (3.1)
Quanta Computer|QOCA aim AI Medical Cloud Platform - S… Quanta Computer
QOCA aim AI Medical Cloud Platform
2026-01-05T08:00:09.052Z 2026-01-05T21:12:11.177Z
CVE-2025-15239
7.1 (4.0)
6.5 (3.1)
Quanta Computer|QOCA aim AI Medical Cloud Platform - S… Quanta Computer
QOCA aim AI Medical Cloud Platform
2026-01-05T08:10:56.673Z 2026-01-05T21:13:21.977Z
CVE-2026-0567
6.9 (4.0)
7.3 (3.1)
7.3 (3.0)
code-projects Content Management System pages.php sql … code-projects
Content Management System
2026-01-02T17:32:05.897Z 2026-01-02T21:07:04.961Z
CVE-2026-0566
5.1 (4.0)
4.7 (3.1)
4.7 (3.0)
code-projects Content Management System edit_posts.php… code-projects
Content Management System
2026-01-02T16:32:05.223Z 2026-01-02T21:00:55.807Z
CVE-2025-10215
7 (4.0)
DLL search path hijacking vulnerability UPDF
UPDF
2025-09-10T11:39:30.395Z 2025-09-10T20:22:06.791Z
CVE-2025-39857
N/A
net/smc: fix one NULL pointer dereference in smc_ib_is… Linux
Linux
2025-09-19T15:26:28.225Z 2025-11-03T17:44:10.731Z
CVE-2025-39860
N/A
Bluetooth: Fix use-after-free in l2cap_sock_cleanup_listen() Linux
Linux
2025-09-19T15:26:30.767Z 2025-11-03T17:44:12.606Z
CVE-2025-39864
N/A
wifi: cfg80211: fix use-after-free in cmp_bss() Linux
Linux
2025-09-19T15:26:33.787Z 2025-11-03T17:44:14.486Z
CVE-2025-39865
N/A
tee: fix NULL pointer dereference in tee_shm_put Linux
Linux
2025-09-19T15:26:34.853Z 2025-11-03T17:44:16.367Z
CVE-2025-39869
N/A
dmaengine: ti: edma: Fix memory allocation size for qu… Linux
Linux
2025-09-23T06:00:43.852Z 2025-11-03T17:44:18.233Z
CVE-2025-39870
N/A
dmaengine: idxd: Fix double free in idxd_setup_wqs() Linux
Linux
2025-09-23T06:00:44.369Z 2025-11-03T17:44:19.166Z
CVE-2025-39873
N/A
can: xilinx_can: xcan_write_frame(): fix use-after-fre… Linux
Linux
2025-09-23T06:00:46.157Z 2025-11-03T17:44:20.103Z
CVE-2025-39876
N/A
net: fec: Fix possible NPD in fec_enet_phy_reset_after… Linux
Linux
2025-09-23T06:00:47.731Z 2025-11-03T17:44:21.070Z
CVE-2025-39877
N/A
mm/damon/sysfs: fix use-after-free in state_show() Linux
Linux
2025-09-23T06:00:48.317Z 2025-11-03T17:44:22.015Z
CVE-2025-39880
N/A
libceph: fix invalid accesses to ceph_connection_v1_info Linux
Linux
2025-09-23T06:00:49.897Z 2025-11-03T17:44:22.996Z
CVE-2025-23203
5.5 (3.1)
Icinga has rest API endpoints accessible to restricted users Icinga
icingaweb2-module-director
2025-03-26T13:44:58.110Z 2026-01-20T19:13:43.844Z
CVE-2025-10327
5.3 (4.0)
6.3 (3.1)
6.3 (3.0)
MiczFlor RPi-Jukebox-RFID shuffle.php os command injection MiczFlor
RPi-Jukebox-RFID
2025-09-12T21:02:06.202Z 2026-01-20T19:41:32.883Z
CVE-2024-57440
7.5 (3.1)
D-Link DSL-3788 revA1 1.01R1B036_EU_EN is vulnera… n/a
n/a
2025-03-20T00:00:00.000Z 2026-01-20T19:51:55.294Z
CVE-2022-50425
N/A
x86/fpu: Fix copy_xstate_to_uabi() to copy init states… Linux
Linux
2025-10-01T11:42:04.776Z 2025-10-01T11:42:04.776Z
CVE-2022-50426
N/A
remoteproc: imx_dsp_rproc: Add mutex protection for wo… Linux
Linux
2025-10-01T11:42:05.613Z 2025-10-01T11:42:05.613Z
CVE-2025-14492
7.8 (3.0)
RealDefense SUPERAntiSpyware Exposed Dangerous Functio… RealDefense
SUPERAntiSpyware
2025-12-23T21:16:27.430Z 2025-12-26T19:35:40.193Z
CVE-2025-14493
7.8 (3.0)
RealDefense SUPERAntiSpyware Exposed Dangerous Functio… RealDefense
SUPERAntiSpyware
2025-12-23T21:16:37.392Z 2025-12-26T19:36:15.337Z
CVE-2025-14495
7.8 (3.0)
RealDefense SUPERAntiSpyware Exposed Dangerous Functio… RealDefense
SUPERAntiSpyware
2025-12-23T21:16:41.860Z 2025-12-26T19:36:34.741Z
CVE-2025-14496
7.8 (3.0)
RealDefense SUPERAntiSpyware Exposed Dangerous Functio… RealDefense
SUPERAntiSpyware
2025-12-23T21:16:32.028Z 2025-12-26T19:35:57.691Z
CVE-2025-14497
7.8 (3.0)
RealDefense SUPERAntiSpyware Exposed Dangerous Functio… RealDefense
SUPERAntiSpyware
2025-12-23T21:16:46.405Z 2025-12-26T19:37:09.332Z
CVE-2025-15082
6.9 (4.0)
5.3 (3.1)
5.3 (3.0)
TOZED ZLT M30s Web Management proc_post information di… TOZED
ZLT M30s
2025-12-25T17:02:09.345Z 2025-12-26T16:37:54.066Z
ID Description Published Updated
fkie_cve-2025-15237 QOCA aim AI Medical Cloud Platform developed by Quanta Computer has a Path Traversal vulnerability,… 2026-01-05T08:15:57.620 2026-01-20T21:14:55.110
fkie_cve-2025-15235 QOCA aim AI Medical Cloud Platform developed by Quanta Computer has a Missing Authorization vulnera… 2026-01-05T08:15:57.237 2026-01-20T21:12:38.050
fkie_cve-2025-15240 QOCA aim AI Medical Cloud Platform developed by Quanta Computer has an Arbitrary File Upload vulner… 2026-01-05T09:15:54.250 2026-01-20T21:10:57.860
fkie_cve-2025-15238 QOCA aim AI Medical Cloud Platform developed by Quanta Computer has a SQL Injection vulnerability, … 2026-01-05T08:15:57.803 2026-01-20T21:09:53.027
fkie_cve-2025-15239 QOCA aim AI Medical Cloud Platform developed by Quanta Computer has a SQL Injection vulnerability, … 2026-01-05T09:15:54.027 2026-01-20T21:09:45.987
fkie_cve-2026-0567 A vulnerability was detected in code-projects Content Management System 1.0. The affected element i… 2026-01-02T18:15:54.747 2026-01-20T20:48:22.890
fkie_cve-2026-0566 A security vulnerability has been detected in code-projects Content Management System 1.0. Impacted… 2026-01-02T17:16:25.263 2026-01-20T20:48:01.080
fkie_cve-2025-10215 DLL search path hijacking vulnerability in the UPDF.exe executable for Windows version 1.8.5.0 allo… 2025-09-10T12:15:32.863 2026-01-20T20:43:36.617
fkie_cve-2025-39857 In the Linux kernel, the following vulnerability has been resolved: net/smc: fix one NULL pointer … 2025-09-19T16:15:44.650 2026-01-20T20:43:05.180
fkie_cve-2025-39860 In the Linux kernel, the following vulnerability has been resolved: Bluetooth: Fix use-after-free … 2025-09-19T16:15:44.973 2026-01-20T20:42:47.797
fkie_cve-2025-39864 In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: fix use-after-… 2025-09-19T16:15:45.420 2026-01-20T20:41:47.730
fkie_cve-2025-39865 In the Linux kernel, the following vulnerability has been resolved: tee: fix NULL pointer derefere… 2025-09-19T16:15:45.540 2026-01-20T20:41:32.020
fkie_cve-2025-39869 In the Linux kernel, the following vulnerability has been resolved: dmaengine: ti: edma: Fix memor… 2025-09-23T06:15:46.097 2026-01-20T20:41:15.407
fkie_cve-2025-39870 In the Linux kernel, the following vulnerability has been resolved: dmaengine: idxd: Fix double fr… 2025-09-23T06:15:46.240 2026-01-20T20:40:34.427
fkie_cve-2025-39873 In the Linux kernel, the following vulnerability has been resolved: can: xilinx_can: xcan_write_fr… 2025-09-23T06:15:46.670 2026-01-20T20:33:41.183
fkie_cve-2025-39876 In the Linux kernel, the following vulnerability has been resolved: net: fec: Fix possible NPD in … 2025-09-23T06:15:47.087 2026-01-20T20:33:01.007
fkie_cve-2025-39877 In the Linux kernel, the following vulnerability has been resolved: mm/damon/sysfs: fix use-after-… 2025-09-23T06:15:47.230 2026-01-20T20:29:36.387
fkie_cve-2025-39880 In the Linux kernel, the following vulnerability has been resolved: libceph: fix invalid accesses … 2025-09-23T06:15:47.663 2026-01-20T20:27:54.100
fkie_cve-2025-23203 Icinga Director is an Icinga config deployment tool. A Security vulnerability has been found starti… 2025-03-26T14:15:32.250 2026-01-20T20:16:00.947
fkie_cve-2025-10327 A weakness has been identified in MiczFlor RPi-Jukebox-RFID up to 2.8.0. Affected by this vulnerabi… 2025-09-12T21:15:33.397 2026-01-20T20:16:00.163
fkie_cve-2024-57440 D-Link DSL-3788 revA1 1.01R1B036_EU_EN is vulnerable to Buffer Overflow via the COMM_MAKECustomMsg … 2025-03-20T17:15:37.550 2026-01-20T20:15:59.393
fkie_cve-2022-50425 In the Linux kernel, the following vulnerability has been resolved: x86/fpu: Fix copy_xstate_to_ua… 2025-10-01T12:15:33.987 2026-01-20T20:14:12.247
fkie_cve-2022-50426 In the Linux kernel, the following vulnerability has been resolved: remoteproc: imx_dsp_rproc: Add… 2025-10-01T12:15:34.120 2026-01-20T20:11:05.320
fkie_cve-2025-14492 RealDefense SUPERAntiSpyware Exposed Dangerous Function Local Privilege Escalation Vulnerability. T… 2025-12-23T22:15:50.380 2026-01-20T20:08:34.030
fkie_cve-2025-14493 RealDefense SUPERAntiSpyware Exposed Dangerous Function Local Privilege Escalation Vulnerability. T… 2025-12-23T22:15:50.510 2026-01-20T20:08:20.317
fkie_cve-2025-14495 RealDefense SUPERAntiSpyware Exposed Dangerous Function Local Privilege Escalation Vulnerability. T… 2025-12-23T22:15:50.757 2026-01-20T20:06:38.153
fkie_cve-2025-14496 RealDefense SUPERAntiSpyware Exposed Dangerous Function Local Privilege Escalation Vulnerability. T… 2025-12-23T22:15:50.883 2026-01-20T20:03:23.107
fkie_cve-2025-14497 RealDefense SUPERAntiSpyware Exposed Dangerous Function Local Privilege Escalation Vulnerability. T… 2025-12-23T22:15:51.010 2026-01-20T20:00:42.990
fkie_cve-2025-15082 A vulnerability was found in TOZED ZLT M30s up to 1.47. Impacted is an unknown function of the file… 2025-12-25T17:15:41.403 2026-01-20T19:54:27.513
fkie_cve-2025-15083 A vulnerability was determined in TOZED ZLT M30s up to 1.47. The affected element is an unknown fun… 2025-12-25T18:15:40.173 2026-01-20T19:35:29.543
ID Severity Description Published Updated
ghsa-98vq-c3wh-hpmx
6.5 (3.1)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … 2025-11-06T18:32:56Z 2026-01-20T15:31:52Z
ghsa-7328-gmrh-6ff7
5.4 (3.1)
Missing Authorization vulnerability in hogash Kallyas kallyas.This issue affects Kallyas: from n/a … 2025-11-06T18:32:56Z 2026-01-20T15:31:52Z
ghsa-3fcj-hp8x-9h3j
5.3 (3.1)
Missing Authorization vulnerability in hogash Kallyas kallyas.This issue affects Kallyas: from n/a … 2025-11-06T18:32:56Z 2026-01-20T15:31:52Z
ghsa-2m7w-ch42-4cm9
6.5 (3.1)
Missing Authorization vulnerability in uxper Togo togo.This issue affects Togo: from n/a through < 1.0.4. 2025-11-06T18:32:56Z 2026-01-20T15:31:52Z
ghsa-r24f-x6qg-mmx6
7.5 (3.1)
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… 2025-11-06T18:32:55Z 2026-01-20T15:31:51Z
ghsa-qq74-8wm9-89mh
6.5 (3.1)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … 2025-11-06T18:32:55Z 2026-01-20T15:31:51Z
ghsa-q785-f6ff-vwgw
8.1 (3.1)
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… 2025-11-06T18:32:56Z 2026-01-20T15:31:51Z
ghsa-q6gw-m89w-g24c
6.5 (3.1)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … 2025-11-06T18:32:56Z 2026-01-20T15:31:51Z
ghsa-9h9p-fpp6-8v2m
8.1 (3.1)
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… 2025-11-06T18:32:55Z 2026-01-20T15:31:51Z
ghsa-7fw8-429x-p2jr
9.9 (3.1)
Unrestricted Upload of File with Dangerous Type vulnerability in hogash Kallyas kallyas.This issue … 2025-11-06T18:32:56Z 2026-01-20T15:31:51Z
ghsa-rcvm-46jw-hvjr
7.1 (3.1)
Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Real… 2025-11-06T18:32:55Z 2026-01-20T15:31:50Z
ghsa-r8cp-qxmg-7ccr
9.8 (3.1)
Deserialization of Untrusted Data vulnerability in WP User Manager WP User Manager wp-user-manager … 2025-11-06T18:32:55Z 2026-01-20T15:31:50Z
ghsa-qpq8-wxcw-x7hj
9.8 (3.1)
Incorrect Privilege Assignment vulnerability in Holest Engineering Selling Commander for WooCommerc… 2025-11-06T18:32:55Z 2026-01-20T15:31:50Z
ghsa-c6wq-6jc2-6vpr
10.0 (3.1)
Unrestricted Upload of File with Dangerous Type vulnerability in Plugify Helpdesk Support Ticket Sy… 2025-11-06T18:32:55Z 2026-01-20T15:31:50Z
ghsa-7jq3-x2f7-gcvg
7.5 (3.1)
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… 2025-11-06T18:32:55Z 2026-01-20T15:31:50Z
ghsa-5r9x-826m-hjm7
6.5 (3.1)
Missing Authorization vulnerability in Bux Bux Woocommerce bux-woocommerce allows Accessing Functio… 2025-11-06T18:32:55Z 2026-01-20T15:31:50Z
ghsa-5pqw-v7pg-6v9r
8.5 (3.1)
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability … 2025-11-06T18:32:55Z 2026-01-20T15:31:50Z
ghsa-5pmp-9cc5-cc5f
7.5 (3.1)
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… 2025-11-06T18:32:55Z 2026-01-20T15:31:50Z
ghsa-575h-jw7h-9pjq
7.5 (3.1)
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Ana… 2025-11-06T18:32:55Z 2026-01-20T15:31:50Z
ghsa-x5vw-7x76-j2wq
8.2 (3.1)
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… 2025-11-06T18:32:55Z 2026-01-20T15:31:49Z
ghsa-wvr7-fv92-hggh
7.5 (3.1)
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… 2025-11-06T18:32:55Z 2026-01-20T15:31:49Z
ghsa-w86c-3v4r-xpwj
7.5 (3.1)
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… 2025-11-06T18:32:55Z 2026-01-20T15:31:49Z
ghsa-w4gr-38pp-hp66
8.2 (3.1)
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… 2025-11-06T18:32:55Z 2026-01-20T15:31:49Z
ghsa-vwx7-c6q3-j293
8.1 (3.1)
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… 2025-11-06T18:32:54Z 2026-01-20T15:31:49Z
ghsa-q2pr-x86m-x8gr
7.5 (3.1)
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… 2025-11-06T18:32:55Z 2026-01-20T15:31:49Z
ghsa-pfr6-c3mm-p2gm
8.8 (3.1)
Missing Authorization vulnerability in e4jvikwp VikBooking Hotel Booking Engine & PMS vikbooking.Th… 2025-11-06T18:32:55Z 2026-01-20T15:31:49Z
ghsa-mh3j-f688-h5r4
7.1 (3.1)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … 2025-11-06T18:32:55Z 2026-01-20T15:31:49Z
ghsa-mfw5-8r4w-r3x5
9.8 (3.1)
Incorrect Privilege Assignment vulnerability in Vito Peleg Atarim atarim-visual-collaboration allow… 2025-11-06T18:32:55Z 2026-01-20T15:31:49Z
ghsa-j36f-98rr-mmcq
7.5 (3.1)
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… 2025-11-06T18:32:55Z 2026-01-20T15:31:49Z
ghsa-hwg2-j439-r9qp
7.1 (3.1)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … 2025-11-06T18:32:54Z 2026-01-20T15:31:49Z
ID Severity Description Package Published Updated
pysec-2021-41
Pillow before 8.1.1 allows attackers to cause a denial of service (memory consumption) be… pillow 2021-03-03T09:15:00Z 2021-03-23T19:49:00Z
pysec-2021-40
Pillow before 8.1.1 allows attackers to cause a denial of service (memory consumption) be… pillow 2021-03-03T09:15:00Z 2021-03-23T19:49:00Z
pysec-2021-42
Pillow before 8.1.1 allows attackers to cause a denial of service (memory consumption) be… pillow 2021-03-03T09:15:00Z 2021-03-23T19:48:00Z
pysec-2021-59
The urllib3 library 1.26.x before 1.26.4 for Python omits SSL certificate validation in s… urllib3 2021-03-15T18:15:00Z 2021-03-23T16:47:00Z
pysec-2021-66
This affects the package jinja2 from 0.0.0 and before 2.11.3. The ReDoS vulnerability is … jinja2 2021-02-01T20:15:00Z 2021-03-22T16:34:00Z
pysec-2021-70
In Pillow before 8.1.0, TiffDecode has a heap-based buffer overflow when decoding crafted… pillow 2021-01-12T09:15:00Z 2021-03-22T15:48:00Z
pysec-2021-36
An issue was discovered in Pillow before 8.1.1. In TiffDecode.c, there is a negative-offs… pillow 2021-03-19T04:15:00Z 2021-03-22T14:11:00Z
pysec-2021-37
An issue was discovered in Pillow before 8.1.1. In TiffDecode.c, there is an out-of-bound… pillow 2021-03-19T04:15:00Z 2021-03-22T14:09:00Z
pysec-2021-38
An issue was discovered in Pillow before 8.1.1. The PDF parser allows a regular expressio… pillow 2021-03-19T04:15:00Z 2021-03-22T14:03:00Z
pysec-2021-39
An issue was discovered in Pillow before 8.1.1. There is an out-of-bounds read in SGIRleD… pillow 2021-03-19T04:15:00Z 2021-03-22T13:36:00Z
pysec-2021-60
Tenable for Jira Cloud is an open source project designed to pull Tenable.io vulnerabilit… tenable-jira-cloud 2021-03-10T22:15:00Z 2021-03-18T20:38:00Z
pysec-2020-173
The pip package before 19.2 for Python allows Directory Traversal when a URL is given in … pip 2020-09-04T20:15:00Z 2021-03-15T16:18:00Z
pysec-2021-43
Products.GenericSetup is a mini-framework for expressing the configured state of a Zope S… products-genericsetup 2021-03-09T01:15:00Z 2021-03-12T18:05:00Z
pysec-2021-45
Products.PluggableAuthService is a pluggable Zope authentication and authorization framew… products-pluggableauthservice 2021-03-08T21:15:00Z 2021-03-12T13:48:00Z
pysec-2021-44
Products.PluggableAuthService is a pluggable Zope authentication and authorization framew… products-pluggableauthservice 2021-03-08T21:15:00Z 2021-03-12T13:22:00Z
pysec-2021-49
PySAML2 is a pure python implementation of SAML Version 2 Standard. PySAML2 before 6.5.0 … pysaml2 2021-01-21T15:15:00Z 2021-03-10T21:00:00Z
pysec-2020-45
An issue was discovered in OpenStack Horizon before 15.3.2, 16.x before 16.2.1, 17.x and … horizon 2020-12-04T08:15:00Z 2021-03-09T15:08:00Z
pysec-2021-9
In Django 2.2 before 2.2.18, 3.0 before 3.0.12, and 3.1 before 3.1.6, the django.utils.ar… django 2021-02-02T07:15:00Z 2021-03-05T19:19:00Z
pysec-2021-113
Django Channels 3.x before 3.0.3 allows remote attackers to obtain sensitive information … channels 2021-02-22T03:15:00Z 2021-02-26T12:36:00Z
pysec-2021-65
GramAddict through 1.2.3 allows remote attackers to execute arbitrary code because of use… gramaddict 2021-02-17T22:15:00Z 2021-02-24T13:58:00Z
pysec-2021-3
The lineage endpoint of the deprecated Experimental API was not protected by authenticati… apache-airflow 2021-02-17T15:15:00Z 2021-02-23T17:59:00Z
pysec-2021-2
Improper Access Control on Configurations Endpoint for the Stable API of Apache Airflow a… apache-airflow 2021-02-17T15:15:00Z 2021-02-23T17:48:00Z
pysec-2021-68
An issue was discovered in NFStream 5.2.0. Because some allocated modules are not correct… nfstream 2021-02-16T15:15:00Z 2021-02-19T21:11:00Z
pysec-2021-63
In the cryptography package before 3.3.2 for Python, certain sequences of update calls to… cryptography 2021-02-07T20:15:00Z 2021-02-19T17:23:00Z
pysec-2021-16
httplib2 is a comprehensive HTTP client library for Python. In httplib2 before version 0.… httplib2 2021-02-08T20:15:00Z 2021-02-12T14:56:00Z
pysec-2021-33
LinkedIn Oncall through 1.4.0 allows reflected XSS via /query because of mishandling of t… oncall 2021-02-05T18:15:00Z 2021-02-08T20:54:00Z
pysec-2021-48
PySAML2 is a pure python implementation of SAML Version 2 Standard. PySAML2 before 6.5.0 … pysaml2 2021-01-21T15:15:00Z 2021-01-29T17:58:00Z
pysec-2021-69
In Pillow before 8.1.0, PcxDecode has a buffer over-read when decoding a crafted PCX file… pillow 2021-01-12T09:15:00Z 2021-01-29T00:47:00Z
pysec-2021-71
In Pillow before 8.1.0, SGIRleDecode has a 4-byte buffer over-read when decoding crafted … pillow 2021-01-12T09:15:00Z 2021-01-29T00:46:00Z
pysec-2020-161
A flaw was found in the solaris_zone module from the Ansible Community modules. When sett… ansible 2020-08-26T03:15:00Z 2021-01-28T18:00:00Z
ID Description Updated
gsd-2024-31939 Cross-Site Request Forgery (CSRF) vulnerability in Soflyy Import any XML or CSV File to W… 2024-04-11T05:03:20.642570Z
gsd-2024-31938 Cross-Site Request Forgery (CSRF) vulnerability in Themeinwp NewsXpress.This issue affect… 2024-04-11T05:03:20.639405Z
gsd-2024-31937 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vuln… 2024-04-11T05:03:20.708644Z
gsd-2024-31936 Cross-Site Request Forgery (CSRF) vulnerability in AyeCode Ltd UsersWP.This issue affects… 2024-04-11T05:03:20.826036Z
gsd-2024-31935 Cross-Site Request Forgery (CSRF) vulnerability in BracketSpace Simple Post Notes.This is… 2024-04-11T05:03:20.688933Z
gsd-2024-31934 Cross-Site Request Forgery (CSRF) vulnerability in Link Whisper Link Whisper Free.This is… 2024-04-11T05:03:20.838401Z
gsd-2024-31933 Cross-Site Request Forgery (CSRF) vulnerability in Live Composer Team Page Builder: Live … 2024-04-11T05:03:20.737413Z
gsd-2024-31932 Cross-Site Request Forgery (CSRF) vulnerability in CreativeThemes Blocksy Companion.This … 2024-04-11T05:03:20.812206Z
gsd-2024-31931 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vuln… 2024-04-11T05:03:20.675204Z
gsd-2024-31930 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vuln… 2024-04-11T05:03:20.640011Z
gsd-2024-31929 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vuln… 2024-04-11T05:03:20.576787Z
gsd-2024-31928 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vuln… 2024-04-11T05:03:20.855567Z
gsd-2024-31927 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vuln… 2024-04-11T05:03:20.871677Z
gsd-2024-31926 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vuln… 2024-04-11T05:03:20.815264Z
gsd-2024-31925 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vuln… 2024-04-11T05:03:20.547686Z
gsd-2024-31924 Cross-Site Request Forgery (CSRF) vulnerability in Exactly WWW EWWW Image Optimizer.This … 2024-04-11T05:03:20.747682Z
gsd-2024-31923 Cross-Site Request Forgery (CSRF) vulnerability in PluginOps Feather Login Page.This issu… 2024-04-11T05:03:20.664279Z
gsd-2024-31922 Cross-Site Request Forgery (CSRF) vulnerability in Anton Aleksandrov WordPress Hosting Be… 2024-04-11T05:03:20.586978Z
gsd-2024-31921 Cross-Site Request Forgery (CSRF) vulnerability in Etoile Web Design Ultimate Product Cat… 2024-04-11T05:03:20.878372Z
gsd-2024-31920 Cross-Site Request Forgery (CSRF) vulnerability in Tyche Softwares Currency per Product f… 2024-04-11T05:03:20.805216Z
gsd-2024-31919 The format of the source doesn't require a description, click on the link for more details. 2024-04-11T05:03:20.749047Z
gsd-2024-31918 The format of the source doesn't require a description, click on the link for more details. 2024-04-11T05:03:20.618704Z
gsd-2024-31917 The format of the source doesn't require a description, click on the link for more details. 2024-04-11T05:03:20.593315Z
gsd-2024-31916 The format of the source doesn't require a description, click on the link for more details. 2024-04-11T05:03:20.724458Z
gsd-2024-31915 The format of the source doesn't require a description, click on the link for more details. 2024-04-11T05:03:20.538078Z
gsd-2024-31914 The format of the source doesn't require a description, click on the link for more details. 2024-04-11T05:03:20.841765Z
gsd-2024-31913 The format of the source doesn't require a description, click on the link for more details. 2024-04-11T05:03:20.772085Z
gsd-2024-31912 The format of the source doesn't require a description, click on the link for more details. 2024-04-11T05:03:20.680413Z
gsd-2024-31911 The format of the source doesn't require a description, click on the link for more details. 2024-04-11T05:03:20.899723Z
gsd-2024-31910 The format of the source doesn't require a description, click on the link for more details. 2024-04-11T05:03:20.705859Z
ID Description Published Updated
mal-2025-192894 Malicious code in activestorage-redundancy (RubyGems) 2025-12-23T08:40:46Z 2025-12-23T08:40:46Z
mal-0000-reversing-labs-be1b99093a5b27a1 2025-12-23T08:40:46Z 2025-12-23T08:40:46Z
MAL-2025-192894 Malicious code in activestorage-redundancy (RubyGems) 2025-12-23T08:40:46Z 2025-12-23T08:40:46Z
MAL-0000-REVERSING-LABS-BE1B99093A5B27A1 2025-12-23T08:40:46Z 2025-12-23T08:40:46Z
mal-0000-reversing-labs-a552f3c484f760a6 2025-12-23T08:40:26Z 2025-12-23T08:40:26Z
MAL-0000-REVERSING-LABS-A552F3C484F760A6 2025-12-23T08:40:26Z 2025-12-23T08:40:26Z
mal-0000-reversing-labs-5e115c4d9e37a744 2025-12-23T08:40:08Z 2025-12-23T08:40:08Z
MAL-0000-REVERSING-LABS-5E115C4D9E37A744 2025-12-23T08:40:08Z 2025-12-23T08:40:08Z
mal-0000-reversing-labs-4d1a8ab8ba373eb5 2025-12-23T08:39:57Z 2025-12-23T08:39:57Z
MAL-0000-REVERSING-LABS-4D1A8AB8BA373EB5 2025-12-23T08:39:57Z 2025-12-23T08:39:57Z
mal-0000-reversing-labs-df29cb02799d2e54 2025-12-23T08:39:56Z 2025-12-23T08:39:56Z
mal-0000-reversing-labs-9955b619a1f6a19c 2025-12-23T08:39:56Z 2025-12-23T08:39:56Z
MAL-0000-REVERSING-LABS-DF29CB02799D2E54 2025-12-23T08:39:56Z 2025-12-23T08:39:56Z
MAL-0000-REVERSING-LABS-9955B619A1F6A19C 2025-12-23T08:39:56Z 2025-12-23T08:39:56Z
mal-0000-reversing-labs-f1e187f97ba67a50 2025-12-23T08:39:54Z 2025-12-23T08:39:54Z
mal-0000-reversing-labs-09a52dbb7e108b87 2025-12-23T08:39:54Z 2025-12-23T08:39:54Z
MAL-0000-REVERSING-LABS-F1E187F97BA67A50 2025-12-23T08:39:54Z 2025-12-23T08:39:54Z
MAL-0000-REVERSING-LABS-09A52DBB7E108B87 2025-12-23T08:39:54Z 2025-12-23T08:39:54Z
mal-0000-reversing-labs-61a3bce8b99fd58c 2025-12-23T08:39:53Z 2025-12-23T08:39:53Z
MAL-0000-REVERSING-LABS-61A3BCE8B99FD58C 2025-12-23T08:39:53Z 2025-12-23T08:39:53Z
mal-0000-reversing-labs-a6f4b3c1f8e11b9b 2025-12-23T08:39:48Z 2025-12-23T08:39:48Z
MAL-0000-REVERSING-LABS-A6F4B3C1F8E11B9B 2025-12-23T08:39:48Z 2025-12-23T08:39:48Z
mal-0000-reversing-labs-e0b5bcc46e90b8aa 2025-12-23T08:39:46Z 2025-12-23T08:39:46Z
MAL-0000-REVERSING-LABS-E0B5BCC46E90B8AA 2025-12-23T08:39:46Z 2025-12-23T08:39:46Z
mal-0000-reversing-labs-c601d4a5e29121be 2025-12-23T08:39:42Z 2025-12-23T08:39:42Z
mal-0000-reversing-labs-89bd7d9fa95f2494 2025-12-23T08:39:42Z 2025-12-23T08:39:42Z
MAL-0000-REVERSING-LABS-C601D4A5E29121BE 2025-12-23T08:39:42Z 2025-12-23T08:39:42Z
MAL-0000-REVERSING-LABS-89BD7D9FA95F2494 2025-12-23T08:39:42Z 2025-12-23T08:39:42Z
mal-0000-reversing-labs-57065be5473ead95 2025-12-23T08:39:41Z 2025-12-23T08:39:41Z
MAL-0000-REVERSING-LABS-57065BE5473EAD95 2025-12-23T08:39:41Z 2025-12-23T08:39:41Z
ID Description Published Updated
wid-sec-w-2024-0847 Node.js: Schwachstelle ermöglicht Codeausführung 2024-04-10T22:00:00.000+00:00 2025-01-12T23:00:00.000+00:00
wid-sec-w-2024-0131 GnuTLS: Mehrere Schwachstellen 2024-01-16T23:00:00.000+00:00 2025-01-12T23:00:00.000+00:00
wid-sec-w-2023-2978 GnuTLS: Schwachstelle ermöglicht Offenlegung von Informationen 2023-11-20T23:00:00.000+00:00 2025-01-12T23:00:00.000+00:00
wid-sec-w-2022-0246 expat: Mehrere Schwachstellen 2022-01-17T23:00:00.000+00:00 2025-01-12T23:00:00.000+00:00
wid-sec-w-2025-0041 IBM App Connect Enterprise: Schwachstelle ermöglicht Denial of Service 2025-01-09T23:00:00.000+00:00 2025-01-09T23:00:00.000+00:00
wid-sec-w-2025-0039 Nagios Enterprises Nagios XI: Schwachstelle ermöglicht Cross-Site Scripting 2025-01-09T23:00:00.000+00:00 2025-01-09T23:00:00.000+00:00
wid-sec-w-2024-3763 Paessler PRTG: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen 2024-12-30T23:00:00.000+00:00 2025-01-09T23:00:00.000+00:00
wid-sec-w-2024-3522 Red Hat OpenStack Platform: Mehrere Schwachstellen 2024-11-20T23:00:00.000+00:00 2025-01-09T23:00:00.000+00:00
wid-sec-w-2024-3494 Mattermost: Mehrere Schwachstellen ermöglichen nicht spezifizierten Angriff 2024-11-18T23:00:00.000+00:00 2025-01-09T23:00:00.000+00:00
wid-sec-w-2024-3410 Xen: Mehrere Schwachstellen 2024-11-11T23:00:00.000+00:00 2025-01-09T23:00:00.000+00:00
wid-sec-w-2024-3329 Mattermost: Schwachstelle ermöglicht nicht spezifizierten Angriff 2024-11-04T23:00:00.000+00:00 2025-01-09T23:00:00.000+00:00
wid-sec-w-2024-3315 Drupal: Mehrere Schwachstellen 2024-10-30T23:00:00.000+00:00 2025-01-09T23:00:00.000+00:00
wid-sec-w-2024-3268 Drupal: Mehrere Schwachstellen 2024-10-23T22:00:00.000+00:00 2025-01-09T23:00:00.000+00:00
wid-sec-w-2024-3127 Drupal: Mehrere Schwachstellen 2024-10-09T22:00:00.000+00:00 2025-01-09T23:00:00.000+00:00
wid-sec-w-2024-3070 Drupal: Mehrere Schwachstellen 2024-10-03T22:00:00.000+00:00 2025-01-09T23:00:00.000+00:00
wid-sec-w-2024-2178 Drupal: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen 2024-09-18T22:00:00.000+00:00 2025-01-09T23:00:00.000+00:00
wid-sec-w-2024-2126 Drupal: Mehrere Schwachstellen ermöglichen Offenlegung von Informationen und Denial of Service 2024-09-11T22:00:00.000+00:00 2025-01-09T23:00:00.000+00:00
wid-sec-w-2024-2055 Drupal: Mehrere Schwachstellen 2024-09-04T22:00:00.000+00:00 2025-01-09T23:00:00.000+00:00
wid-sec-w-2024-1943 Drupal "Advanced Varnish" Extension: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen 2024-08-28T22:00:00.000+00:00 2025-01-09T23:00:00.000+00:00
wid-sec-w-2024-1940 Linux Kernel: Schwachstelle ermöglicht nicht spezifizierten Angriff 2024-08-27T22:00:00.000+00:00 2025-01-09T23:00:00.000+00:00
wid-sec-w-2024-1900 Drupal Module: Mehrere Schwachstellen 2024-08-21T22:00:00.000+00:00 2025-01-09T23:00:00.000+00:00
wid-sec-w-2024-1816 Linux Kernel: Schwachstelle ermöglicht Denial of Service 2024-08-12T22:00:00.000+00:00 2025-01-09T23:00:00.000+00:00
wid-sec-w-2024-1791 Drupal: Mehrere Schwachstellen ermöglichen Codeausführung und Cross Site Scripting 2024-08-07T22:00:00.000+00:00 2025-01-09T23:00:00.000+00:00
wid-sec-w-2024-1740 Drupal: Schwachstelle ermöglicht Cross-Site Scripting 2024-07-31T22:00:00.000+00:00 2025-01-09T23:00:00.000+00:00
wid-sec-w-2024-1300 Drupal: Schwachstelle ermöglicht Denial of Service 2024-06-05T22:00:00.000+00:00 2025-01-09T23:00:00.000+00:00
wid-sec-w-2024-1258 Drupal: Mehrere Schwachstellen 2024-05-30T22:00:00.000+00:00 2025-01-09T23:00:00.000+00:00
wid-sec-w-2024-1220 Drupal Erweiterungen: Mehrere Schwachstellen 2024-05-22T22:00:00.000+00:00 2025-01-09T23:00:00.000+00:00
wid-sec-w-2024-1165 Drupal: Schwachstelle ermöglicht Offenlegung von Informationen 2024-05-15T22:00:00.000+00:00 2025-01-09T23:00:00.000+00:00
wid-sec-w-2024-0968 Drupal: Mehrere Schwachstellen 2024-04-24T22:00:00.000+00:00 2025-01-09T23:00:00.000+00:00
wid-sec-w-2024-0739 Drupal: Schwachstelle ermöglicht Cross-Site Scripting 2024-03-27T23:00:00.000+00:00 2025-01-09T23:00:00.000+00:00
ID Description Published Updated
rhsa-2025:12331 Red Hat Security Advisory: icu security update 2025-07-31T04:35:04+00:00 2026-01-22T19:42:09+00:00
rhsa-2025:12083 Red Hat Security Advisory: icu security update 2025-07-29T12:31:05+00:00 2026-01-22T19:42:07+00:00
rhsa-2025:11888 Red Hat Security Advisory: icu security update 2025-07-28T11:26:51+00:00 2026-01-22T19:42:06+00:00
rhsa-2025:11841 Red Hat Security Advisory: qt5-qtbase security update 2025-07-28T07:28:16+00:00 2026-01-22T19:42:03+00:00
rhsa-2025:11388 Red Hat Security Advisory: Red Hat OpenShift Builds 1.5.0 2025-07-17T14:21:22+00:00 2026-01-22T19:41:56+00:00
rhsa-2025:11146 Red Hat Security Advisory: Red Hat OpenShift Builds 1.4.1 2025-07-15T12:52:27+00:00 2026-01-22T19:41:54+00:00
rhsa-2025:10992 Red Hat Security Advisory: Red Hat Developer Hub 1.5.3 release. 2025-07-14T19:46:35+00:00 2026-01-22T19:41:49+00:00
rhsa-2025:10809 Red Hat Security Advisory: satellite/iop-advisor-engine-rhel9 container image available as a Technology Preview 2025-07-10T14:18:19+00:00 2026-01-22T19:41:48+00:00
rhsa-2025:10787 Red Hat Security Advisory: Red Hat OpenShift Builds 1.4.1 2025-07-10T10:31:35+00:00 2026-01-22T19:41:47+00:00
rhsa-2026:0845 Red Hat Security Advisory: brotli security update 2026-01-20T12:13:35+00:00 2026-01-22T19:24:32+00:00
rhsa-2026:0008 Red Hat Security Advisory: brotli security update 2026-01-05T01:26:08+00:00 2026-01-22T19:24:30+00:00
rhsa-2025:3734 Red Hat Security Advisory: DevWorkspace Operator 0.33.0 release. 2025-04-09T05:01:50+00:00 2026-01-22T19:24:26+00:00
rhsa-2025:14644 Red Hat Security Advisory: Insights proxy Container Image 2025-08-26T15:51:25+00:00 2026-01-22T19:24:15+00:00
rhsa-2025:23851 Red Hat Security Advisory: go-rpm-macros security update 2025-12-22T11:31:13+00:00 2026-01-22T16:49:10+00:00
rhsa-2025:23834 Red Hat Security Advisory: go-rpm-macros security update 2025-12-22T09:38:58+00:00 2026-01-22T16:49:10+00:00
rhsa-2025:23833 Red Hat Security Advisory: go-rpm-macros security update 2025-12-22T09:31:10+00:00 2026-01-22T16:49:09+00:00
rhsa-2025:22005 Red Hat Security Advisory: go-rpm-macros security update 2025-11-25T01:21:20+00:00 2026-01-22T16:48:52+00:00
rhsa-2025:22004 Red Hat Security Advisory: go-rpm-macros security update 2025-11-25T01:11:08+00:00 2026-01-22T16:48:51+00:00
rhsa-2026:0976 Red Hat Security Advisory: openssh security update 2026-01-22T09:20:02+00:00 2026-01-22T16:47:29+00:00
rhsa-2025:21508 Red Hat Security Advisory: libtiff security update 2025-11-17T12:02:18+00:00 2026-01-22T16:47:16+00:00
rhsa-2025:21507 Red Hat Security Advisory: libtiff security update 2025-11-17T12:08:42+00:00 2026-01-22T16:47:16+00:00
rhsa-2025:21506 Red Hat Security Advisory: libtiff security update 2025-11-17T11:38:53+00:00 2026-01-22T16:47:16+00:00
rhsa-2025:21407 Red Hat Security Advisory: libtiff security update 2025-11-17T01:24:48+00:00 2026-01-22T16:47:15+00:00
rhsa-2025:21062 Red Hat Security Advisory: libtiff security update 2025-11-12T02:41:56+00:00 2026-01-22T16:47:15+00:00
rhsa-2025:21061 Red Hat Security Advisory: libtiff security update 2025-11-12T02:34:12+00:00 2026-01-22T16:47:14+00:00
rhsa-2025:20034 Red Hat Security Advisory: libtiff security update 2025-11-10T14:19:58+00:00 2026-01-22T16:47:14+00:00
rhsa-2025:21060 Red Hat Security Advisory: libtiff security update 2025-11-12T02:41:37+00:00 2026-01-22T16:47:13+00:00
rhsa-2025:20998 Red Hat Security Advisory: libtiff security update 2025-11-11T19:21:21+00:00 2026-01-22T16:47:13+00:00
rhsa-2025:20956 Red Hat Security Advisory: libtiff security update 2025-11-11T15:08:53+00:00 2026-01-22T16:47:13+00:00
rhsa-2025:19947 Red Hat Security Advisory: libtiff security update 2025-11-10T02:22:22+00:00 2026-01-22T16:47:12+00:00
ID Description Published Updated
icsa-20-070-02 Siemens SIMATIC S7-300 CPUs and SINUMERIK Controller over Profinet (Update A) 2020-03-10T00:00:00.000000Z 2020-03-10T00:00:00.000000Z
icsa-20-042-11 Siemens SIMATIC S7-1500 (Update A) 2020-02-11T00:00:00.000000Z 2020-03-10T00:00:00.000000Z
icsa-19-344-06 Siemens SIMATIC S7-1200 and S7-1500 CPU Families (Update B) 2019-12-10T00:00:00.000000Z 2020-03-10T00:00:00.000000Z
icsa-20-065-01 WAGO I/O-CHECK 2020-03-05T00:00:00.000000Z 2020-03-05T00:00:00.000000Z
icsa-20-063-04 Moxa AWK-3131A Series Industrial AP/Bridge/Client 2020-03-03T00:00:00.000000Z 2020-03-03T00:00:00.000000Z
icsa-20-063-03 Omron PLC CJ Series 2020-03-03T00:00:00.000000Z 2020-03-03T00:00:00.000000Z
icsa-20-063-02 ICSA-20-063-02_PHOENIX CONTACT Emalytics Controller ILC 2020-03-03T00:00:00.000000Z 2020-03-03T00:00:00.000000Z
icsa-20-063-01 Emerson ValveLink 2020-03-03T00:00:00.000000Z 2020-03-03T00:00:00.000000Z
icsa-20-056-05 Honeywell WIN-PAK 2020-02-25T00:00:00.000000Z 2020-02-25T00:00:00.000000Z
icsa-20-056-04 Moxa EDS-G516E and EDS-510E Series Ethernet Switches 2020-02-25T00:00:00.000000Z 2020-02-25T00:00:00.000000Z
icsa-20-056-03 Moxa PT-7528 and PT-7828 Series Ethernet Switches 2020-02-25T00:00:00.000000Z 2020-02-25T00:00:00.000000Z
icsa-20-056-02 Moxa ioLogik 2542-HSPA Series Controllers and IOs, and IOxpress Configuration Utility 2020-02-25T00:00:00.000000Z 2020-02-25T00:00:00.000000Z
icsa-20-056-01 Moxa MB3xxx Series Protocol Gateways 2020-02-25T00:00:00.000000Z 2020-02-25T00:00:00.000000Z
icsa-20-051-04 Auto-Maskin RP210E, DCU210E, and Marine Observer Pro (Android App) 2020-02-20T00:00:00.000000Z 2020-02-20T00:00:00.000000Z
icsa-20-051-03 Honeywell NOTI-FIRE-NET Web Server (NWS-3) 2020-02-20T00:00:00.000000Z 2020-02-20T00:00:00.000000Z
icsa-20-051-02 Rockwell Automation FactoryTalk Diagnostics 2020-02-20T00:00:00.000000Z 2020-02-20T00:00:00.000000Z
icsa-20-051-01 ICSA-20-051-01_B&R Automation Studio and Automation Runtime 2020-02-20T00:00:00.000000Z 2020-02-20T00:00:00.000000Z
icsma-20-049-01 Spacelabs Xhibit Telemetry Receiver (XTR) 2020-02-18T00:00:00.000000Z 2020-02-18T00:00:00.000000Z
icsa-20-049-02 Emerson OpenEnterprise 2020-02-18T00:00:00.000000Z 2020-02-18T00:00:00.000000Z
icsa-20-049-01 Honeywell INNCOM INNControl 3 2020-02-18T00:00:00.000000Z 2020-02-18T00:00:00.000000Z
icsa-20-044-02 Schneider Electric Magelis HMI Panels 2020-02-13T00:00:00.000000Z 2020-02-13T00:00:00.000000Z
icsa-20-044-01 Schneider Electric Modicon Ethernet Serial RTU 2020-02-13T00:00:00.000000Z 2020-02-13T00:00:00.000000Z
icsa-20-042-13 Digi ConnectPort LTS 32 MEI 2020-02-11T00:00:00.000000Z 2020-02-11T00:00:00.000000Z
icsa-20-042-12 Siemens SIPROTEC 4 and SIPROTEC Compact 2020-02-11T00:00:00.000000Z 2020-02-11T00:00:00.000000Z
icsa-20-042-09 Siemens OZW Web Server 2020-02-11T00:00:00.000000Z 2020-02-11T00:00:00.000000Z
icsa-20-042-08 Siemens SIPORT MP 2020-02-11T00:00:00.000000Z 2020-02-11T00:00:00.000000Z
icsa-20-042-03 Siemens SIMATIC CP 1543-1 2020-02-11T00:00:00.000000Z 2020-02-11T00:00:00.000000Z
icsa-19-162-03 Siemens LOGO!8 Devices 2019-06-11T00:00:00.000000Z 2020-02-10T00:00:00.000000Z
icsa-19-099-01 Siemens SIMOCODE pro V EIP 2019-04-09T00:00:00.000000Z 2020-02-10T00:00:00.000000Z
icsa-19-043-05 Siemens Intel Active Management Technology of SIMATIC IPCs 2019-02-12T00:00:00.000000Z 2020-02-10T00:00:00.000000Z
ID Description Published Updated
cisco-sa-sigbypass-FcvPPCeP Cisco Firepower Threat Defense Software Signature Verification Bypass Vulnerability 2020-05-06T16:00:00+00:00 2020-05-06T16:00:00+00:00
cisco-sa-hcmf-xxe-qqcmauj2 Cisco Hosted Collaboration Mediation Fulfillment XML External Expansion Vulnerability 2020-05-06T16:00:00+00:00 2020-05-06T16:00:00+00:00
cisco-sa-hcmf-xxe-qqCMAUJ2 Cisco Hosted Collaboration Mediation Fulfillment XML External Expansion Vulnerability 2020-05-06T16:00:00+00:00 2020-05-06T16:00:00+00:00
cisco-sa-ftd-shell-9rhjf68k Cisco Firepower Threat Defense Software Shell Access Vulnerability 2020-05-06T16:00:00+00:00 2020-05-06T16:00:00+00:00
cisco-sa-ftd-shell-9rhJF68K Cisco Firepower Threat Defense Software Shell Access Vulnerability 2020-05-06T16:00:00+00:00 2020-05-06T16:00:00+00:00
cisco-sa-ftd-infodis-kzxgtujd Cisco Firepower Threat Defense Software Information Disclosure Vulnerability 2020-05-06T16:00:00+00:00 2020-05-06T16:00:00+00:00
cisco-sa-ftd-infodis-kZxGtUJD Cisco Firepower Threat Defense Software Information Disclosure Vulnerability 2020-05-06T16:00:00+00:00 2020-05-06T16:00:00+00:00
cisco-sa-ftd-accesslist-bypass-5dzs5qzp Cisco Firepower Threat Defense Software Management Access List Bypass Vulnerability 2020-05-06T16:00:00+00:00 2020-05-06T16:00:00+00:00
cisco-sa-ftd-accesslist-bypass-5dZs5qZp Cisco Firepower Threat Defense Software Management Access List Bypass Vulnerability 2020-05-06T16:00:00+00:00 2020-05-06T16:00:00+00:00
cisco-sa-fmcxss-ut3bmx9k Cisco Firepower Management Center Cross-Site Scripting Vulnerability 2020-05-06T16:00:00+00:00 2020-05-06T16:00:00+00:00
cisco-sa-fmcxss-UT3bMx9k Cisco Firepower Management Center Cross-Site Scripting Vulnerability 2020-05-06T16:00:00+00:00 2020-05-06T16:00:00+00:00
cisco-sa-fmcua-statcred-weecczct Cisco Firepower Management Center Static Credential Vulnerabilities 2020-05-06T16:00:00+00:00 2020-05-06T16:00:00+00:00
cisco-sa-fmcua-statcred-weeCcZct Cisco Firepower Management Center Static Credential Vulnerabilities 2020-05-06T16:00:00+00:00 2020-05-06T16:00:00+00:00
cisco-sa-fmcai-z5dqobvn Cisco Firepower Management Center File Overwrite Vulnerability 2020-05-06T16:00:00+00:00 2020-05-06T16:00:00+00:00
cisco-sa-fmcai-z5dQObVN Cisco Firepower Management Center File Overwrite Vulnerability 2020-05-06T16:00:00+00:00 2020-05-06T16:00:00+00:00
cisco-sa-fmc-webredirect-tcfgd42y Cisco Firepower Management Center Open Redirect Vulnerability 2020-05-06T16:00:00+00:00 2020-05-06T16:00:00+00:00
cisco-sa-fmc-webredirect-TcFgd42y Cisco Firepower Management Center Open Redirect Vulnerability 2020-05-06T16:00:00+00:00 2020-05-06T16:00:00+00:00
cisco-sa-fdmfo-hvpwkxde Cisco Firepower Device Manager On-Box Software Arbitrary File Overwrite Vulnerability 2020-05-06T16:00:00+00:00 2020-05-06T16:00:00+00:00
cisco-sa-fdmfo-HvPWKxDe Cisco Firepower Device Manager On-Box Software Arbitrary File Overwrite Vulnerability 2020-05-06T16:00:00+00:00 2020-05-06T16:00:00+00:00
cisco-sa-asaftd-dos-qk8ctglz Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software DHCP Denial of Service Vulnerability 2020-05-06T16:00:00+00:00 2020-05-06T16:00:00+00:00
cisco-sa-asaftd-dos-qk8cTGLz Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software DHCP Denial of Service Vulnerability 2020-05-06T16:00:00+00:00 2020-05-06T16:00:00+00:00
cisco-sa-asa-dos-p43gce5j Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software BGP Denial of Service Vulnerability 2020-05-06T16:00:00+00:00 2020-05-06T16:00:00+00:00
cisco-sa-asa-dos-bqyfrjt9 Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software IKEv1 Denial of Service Vulnerability 2020-05-06T16:00:00+00:00 2020-05-06T16:00:00+00:00
cisco-sa-asa-dos-P43GCE5j Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software BGP Denial of Service Vulnerability 2020-05-06T16:00:00+00:00 2020-05-06T16:00:00+00:00
cisco-sa-asa-dos-BqYFRJt9 Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software IKEv1 Denial of Service Vulnerability 2020-05-06T16:00:00+00:00 2020-05-06T16:00:00+00:00
cisco-sa-alfo-thwfdmte Cisco Firepower Management Center Arbitrary Log File Write Vulnerability 2020-05-06T16:00:00+00:00 2020-05-06T16:00:00+00:00
cisco-sa-alfo-tHwFDmTE Cisco Firepower Management Center Arbitrary Log File Write Vulnerability 2020-05-06T16:00:00+00:00 2020-05-06T16:00:00+00:00
cisco-sa-xesdwcinj-acq5mxcn Cisco IOS XE SD-WAN Software Command Injection Vulnerability 2020-04-29T16:00:00+00:00 2020-04-29T16:00:00+00:00
cisco-sa-xesdwcinj-AcQ5MxCn Cisco IOS XE SD-WAN Software Command Injection Vulnerability 2020-04-29T16:00:00+00:00 2020-04-29T16:00:00+00:00
cisco-sa-20200226-wi-fi-info-disclosure Wi-Fi Protected Network and Wi-Fi Protected Network 2 Information Disclosure Vulnerability 2020-02-27T00:00:00+00:00 2020-04-28T22:24:15+00:00
ID Description Published Updated
msrc_cve-2024-43900 media: xc2028: avoid use-after-free in load_firmware_cb() 2024-08-02T00:00:00.000Z 2025-09-03T21:35:59.000Z
msrc_cve-2023-26136 Versions of the package tough-cookie before 4.1.3 are vulnerable to Prototype Pollution due to improper handling of Cookies when using CookieJar in rejectPublicSuffixes=false mode. This issue arises from the manner in which the objects are initialized. 2023-07-01T07:00:00.000Z 2025-09-03T21:34:38.000Z
msrc_cve-2024-2612 If an attacker could find a way to trigger a particular code path in `SafeRefPtr`, it could have triggered a crash or potentially be leveraged to achieve code execution. This vulnerability affects Firefox < 124, Firefox ESR < 115.9, and Thunderbird < 115.9. 2024-03-02T08:00:00.000Z 2025-09-03T21:34:18.000Z
msrc_cve-2021-41500 Incomplete string comparison vulnerability exits in cvxopt.org cvxop <= 1.2.6 in APIs (cvxopt.cholmod.diag, cvxopt.cholmod.getfactor, cvxopt.cholmod.solve, cvxopt.cholmod.spsolve), which allows attackers to conduct Denial of Service attacks by construct fake Capsule objects. 2021-12-02T00:00:00.000Z 2025-09-03T21:33:36.000Z
msrc_cve-2022-49728 ipv6: Fix signed integer overflow in __ip6_append_data 2025-02-02T00:00:00.000Z 2025-09-03T21:32:44.000Z
msrc_cve-2023-44270 An issue was discovered in PostCSS before 8.4.31. The vulnerability affects linters using PostCSS to parse external untrusted CSS. An attacker can prepare CSS in such a way that it will contains parts parsed by PostCSS as a CSS comment. After processing by PostCSS, it will be included in the PostCSS output in CSS nodes (rules, properties) despite being included in a comment. 2023-09-01T00:00:00.000Z 2025-09-03T21:32:23.000Z
msrc_cve-2022-29244 npm packing does not respect root-level ignore files in workspaces 2022-06-02T00:00:00.000Z 2025-09-03T21:32:04.000Z
msrc_cve-2019-25085 GNOME gvdb gvdb-builder.c gvdb_table_write_contents_async use after free 2022-12-02T00:00:00.000Z 2025-09-03T21:31:25.000Z
msrc_cve-2016-3959 The Verify function in crypto/dsa/dsa.go in Go before 1.5.4 and 1.6.x before 1.6.1 does not properly check parameters passed to the big integer library, which might allow remote attackers to cause a denial of service (infinite loop) via a crafted public key to a program that uses HTTPS client certificates or SSH server libraries. 2016-05-02T00:00:00.000Z 2025-09-03T21:31:16.000Z
msrc_cve-2024-57977 memcg: fix soft lockup in the OOM process 2025-02-02T00:00:00.000Z 2025-09-03T21:30:48.000Z
msrc_cve-2020-24241 In Netwide Assembler (NASM) 2.15rc10, there is heap use-after-free in saa_wbytes in nasmlib/saa.c. 2020-08-02T00:00:00.000Z 2025-09-03T21:30:46.000Z
msrc_cve-2024-38545 RDMA/hns: Fix UAF for cq async event 2024-06-02T07:00:00.000Z 2025-09-03T21:30:11.000Z
msrc_cve-2019-6486 Go before 1.10.8 and 1.11.x before 1.11.5 mishandles P-521 and P-384 elliptic curves, which allows attackers to cause a denial of service (CPU consumption) or possibly conduct ECDH private key recovery attacks. 2019-01-02T00:00:00.000Z 2025-09-03T21:29:11.000Z
msrc_cve-2024-6614 The frame iterator could get stuck in a loop when encountering certain wasm frames leading to incorrect stack traces. This vulnerability affects Firefox < 128 and Thunderbird < 128. 2024-07-01T07:00:00.000Z 2025-09-03T21:29:10.000Z
msrc_cve-2022-48976 netfilter: flowtable_offload: fix using __this_cpu_add in preemptible 2024-10-01T07:00:00.000Z 2025-09-03T21:28:59.000Z
msrc_cve-2023-29547 When a secure cookie existed in the Firefox cookie jar an insecure cookie for the same domain could have been created, when it should have silently failed. This could have led to a desynchronization in expected results when reading from the secure cookie. This vulnerability affects Firefox for Android < 112, Firefox < 112, and Focus for Android < 112. 2023-06-01T07:00:00.000Z 2025-09-03T21:28:36.000Z
msrc_cve-2023-45287 Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel 2023-12-01T08:00:00.000Z 2025-09-03T21:28:14.000Z
msrc_cve-2021-33452 An issue was discovered in NASM version 2.16rc0. There are memory leaks in nasm_malloc() in nasmlib/alloc.c. 2022-07-02T00:00:00.000Z 2025-09-03T21:27:58.000Z
msrc_cve-2024-26607 drm/bridge: sii902x: Fix probing race issue 2024-02-02T08:00:00.000Z 2025-09-03T21:27:56.000Z
msrc_cve-2024-50157 RDMA/bnxt_re: Avoid CPU lockups due fifo occupancy check loop 2024-11-02T00:00:00.000Z 2025-09-03T21:26:39.000Z
msrc_cve-2019-19317 lookupName in resolve.c in SQLite 3.30.1 omits bits from the colUsed bitmask in the case of a generated column, which allows attackers to cause a denial of service or possibly have unspecified other impact. 2019-12-02T00:00:00.000Z 2025-09-03T21:25:50.000Z
msrc_cve-2024-35955 kprobes: Fix possible use-after-free issue on kprobe registration 2024-05-02T07:00:00.000Z 2025-09-03T21:25:15.000Z
msrc_cve-2024-46871 drm/amd/display: Correct the defined value for AMDGPU_DMUB_NOTIFICATION_MAX 2024-10-01T07:00:00.000Z 2025-09-03T21:23:35.000Z
msrc_cve-2024-46715 driver: iio: add missing checks on iio_info's callback access 2024-09-01T07:00:00.000Z 2025-09-03T21:23:15.000Z
msrc_cve-2024-49934 fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name 2024-10-01T07:00:00.000Z 2025-09-03T21:23:09.000Z
msrc_cve-2024-53098 drm/xe/ufence: Prefetch ufence addr to catch bogus address 2024-11-02T00:00:00.000Z 2025-09-03T21:22:54.000Z
msrc_cve-2023-52755 ksmbd: fix slab out of bounds write in smb_inherit_dacl() 2024-05-02T07:00:00.000Z 2025-09-03T21:22:48.000Z
msrc_cve-2023-7207 Debian's cpio contains a path traversal vulnerability. This issue was introduced by reverting CVE-2015-1197 patches which had caused a regression in --no-absolute-filenames. Upstream has since provided a proper fix to --no-absolute-filenames. 2024-01-01T08:00:00.000Z 2025-09-03T21:21:35.000Z
msrc_cve-2024-56549 cachefiles: Fix NULL pointer dereference in object->file 2024-12-02T00:00:00.000Z 2025-09-03T21:21:02.000Z
msrc_cve-2024-53203 usb: typec: fix potential array underflow in ucsi_ccg_sync_control() 2024-12-02T00:00:00.000Z 2025-09-03T21:19:53.000Z
ID Description Updated
var-201502-0204 CRLF injection vulnerability in export.cfg in the web-based administrative console for Si… 2024-02-13T23:00:38.938000Z
var-202204-0989 Dell Wyse Management Suite versions 2.0 through 3.5.2 contain an unrestricted file upload… 2024-02-13T23:00:32.557000Z
var-200702-0070 Format string vulnerability in the SCP module in Ipswitch WS_FTP 2007 Professional might … 2024-02-13T23:00:21.069000Z
var-201110-0447 Directory traversal vulnerability in Cisco Unified Communications Manager (CUCM) 5.x and … 2024-02-13T23:00:17.257000Z
var-201510-0583 J-Web in Juniper vSRX virtual firewalls with Junos OS before 15.1X49-D20 allows remote at… 2024-02-13T22:59:51.221000Z
var-201505-0128 Cross-site scripting (XSS) vulnerability in the autolearn configuration page in Fortinet … 2024-02-13T22:59:51.448000Z
var-201704-0422 Huawei AR3200 with software V200R007C00, V200R005C32, V200R005C20; S12700 with software V… 2024-02-13T22:59:50.414000Z
var-201803-0200 Huawei Honor Smart Scale Application with software of 1.1.1 has an information disclosure… 2024-02-13T22:59:49.412000Z
var-201712-0383 The Web Configuration Utility in Meinberg LANTIME devices with firmware before 6.24.004 a… 2024-02-13T22:59:49.673000Z
var-201710-0911 On FiberHome routers, Directory Traversal exists in /cgi-bin/webproc via the getpage para… 2024-02-13T22:59:49.813000Z
var-201809-0956 Endress+Hauser WirelessHART Fieldgate SWG70 3.x devices allow Directory Traversal via the… 2024-02-13T22:59:48.807000Z
var-202111-0835 AlquistManager branch as of commit 280d99f43b11378212652e75f6f3159cde9c1d36 is affected b… 2024-02-13T22:59:42.022000Z
var-202202-1728 A vulnerability in the DNS-based Authentication of Named Entities (DANE) email verificati… 2024-02-13T22:59:41.009000Z
var-202202-1283 A improper neutralization of input during web page generation ('cross-site scripting') in… 2024-02-13T22:59:41.087000Z
var-202201-1903 ASUS VivoMini/Mini PC device has an improper input validation vulnerability. A local atta… 2024-02-13T22:59:41.430000Z
var-202201-1882 Dell EMC AppSync versions 3.9 to 4.3 contain an Improper Restriction of Excessive Authent… 2024-02-13T22:59:41.459000Z
var-202201-0620 An Improper Validation of Syntactic Correctness of Input vulnerability in the Juniper DHC… 2024-02-13T22:59:41.834000Z
var-202203-0910 An exposure of sensitive system information to an unauthorized control sphere vulnerabili… 2024-02-13T22:59:40.860000Z
var-201307-0226 Cross-site scripting (XSS) vulnerability in Cisco Unified Operations Manager allows remot… 2024-02-13T22:59:22.186000Z
var-201502-0156 Race condition in the Neighbor Discovery (ND) protocol implementation in Cisco IOS and IO… 2024-02-13T22:58:51.353000Z
var-201409-0053 Cross-site request forgery (CSRF) vulnerability in util_system.html in Belkin N900 router… 2024-02-13T22:58:51.590000Z
var-201808-0944 A security vulnerability was identified in 3PAR Service Processor (SP) prior to SP-4.4.0.… 2024-02-13T22:58:48.794000Z
var-201912-0691 Barco ClickShare Button R9861500D01 devices before 1.10.0.13 have Missing Support for Int… 2024-02-13T22:58:47.432000Z
var-201911-0625 The Log module in SECUDOS DOMOS before 5.6 allows local file inclusion. SECUDOS DOMOS Con… 2024-02-13T22:58:47.657000Z
var-201911-0582 The Xiaomi Redmi 6 Pro Android device with a build fingerprint of xiaomi/sakura_india/sak… 2024-02-13T22:58:47.541000Z
var-202006-0587 Certain NETGEAR devices are affected by disclosure of administrative credentials. This af… 2024-02-13T22:58:46.794000Z
var-202203-1966 Improper neutralization of special elements used in a command ('Command Injection') vulne… 2024-02-13T22:58:44.241000Z
var-202201-1560 A traffic classification vulnerability in Juniper Networks Junos OS on the SRX Series Ser… 2024-02-13T22:58:44.947000Z
var-201111-0147 Cross-site request forgery (CSRF) vulnerability in the Services Ready Platform Configurat… 2024-02-13T22:57:00.663000Z
var-201505-0184 Cross-site request forgery (CSRF) vulnerability in Cisco Unified Intelligence Center 10.6… 2024-02-13T22:56:58.225000Z
ID Description Published Updated
jvndb-2006-000938 Webmin directory traversal vulnerability 2008-05-21T00:00+09:00 2008-05-21T00:00+09:00
jvndb-2006-000858 Ruby vulnerability caused by a problem with the alias funtion so that safe level 4 does not function as a sandbox 2008-05-21T00:00+09:00 2008-05-21T00:00+09:00
jvndb-2006-000853 tDiary arbitrary Ruby script execution vulnerability 2008-05-21T00:00+09:00 2008-05-21T00:00+09:00
jvndb-2006-000852 Joomla! cross-site scripting vulnerability 2008-05-21T00:00+09:00 2008-05-21T00:00+09:00
jvndb-2006-000851 pnamazu cross-site scripting vulnerability 2008-05-21T00:00+09:00 2008-05-21T00:00+09:00
jvndb-2006-000850 a-blog cross-site scripting vulnerability 2008-05-21T00:00+09:00 2008-05-21T00:00+09:00
jvndb-2006-000849 SugarCRM cross-site scripting vulnerability 2008-05-21T00:00+09:00 2008-05-21T00:00+09:00
jvndb-2006-000816 Shobo Shobo Nikki System (sns) cross-site scripting vulnerability 2008-05-21T00:00+09:00 2008-05-21T00:00+09:00
jvndb-2006-000812 Hanako buffer overflow vulnerability 2008-05-21T00:00+09:00 2008-05-21T00:00+09:00
jvndb-2006-000809 TikiWiki cross-site scripting vulnerability 2008-05-21T00:00+09:00 2008-05-21T00:00+09:00
jvndb-2006-000803 Chama Cargo cross-site scripting vulnerability 2008-05-21T00:00+09:00 2008-05-21T00:00+09:00
jvndb-2006-000802 Blogn cross-site scripting vulnerability 2008-05-21T00:00+09:00 2008-05-21T00:00+09:00
jvndb-2006-000792 tDiary cross-site scripting vulnerability 2008-05-21T00:00+09:00 2008-05-21T00:00+09:00
jvndb-2006-000791 phpComasy cross-site scripting vulnerability 2008-05-21T00:00+09:00 2008-05-21T00:00+09:00
jvndb-2006-000784 eyeOS cross-site scripting vulnerability 2008-05-21T00:00+09:00 2008-05-21T00:00+09:00
jvndb-2006-000781 EC-CUBE cross-site scripting vulnerability 2008-05-21T00:00+09:00 2008-05-21T00:00+09:00
jvndb-2006-000777 Nucleus cross-site scripting vulnerability 2008-05-21T00:00+09:00 2008-05-21T00:00+09:00
jvndb-2006-000771 Kahua vulnerable in allowing to share login sessions 2008-05-21T00:00+09:00 2008-05-21T00:00+09:00
jvndb-2006-000760 Hyper NIKKI System cross-site scripting vulnerability 2008-05-21T00:00+09:00 2008-05-21T00:00+09:00
jvndb-2006-000758 MyODBC Japanese Conversion Edition denial of service vulnerability 2008-05-21T00:00+09:00 2008-05-21T00:00+09:00
jvndb-2006-000753 Ruby cgi.rb Denial of Service Vulnerability 2008-05-21T00:00+09:00 2008-05-21T00:00+09:00
jvndb-2006-000742 desknet's buffer overflow vulnerability 2008-05-21T00:00+09:00 2008-05-21T00:00+09:00
jvndb-2006-000737 NEC MultiWriter 1700C/7500C FTP server vulnerability 2008-05-21T00:00+09:00 2008-05-21T00:00+09:00
jvndb-2006-000736 NEC MultiWriter 1700C web server authentication bypass vulnerability 2008-05-21T00:00+09:00 2008-05-21T00:00+09:00
jvndb-2006-000734 Ichitaro buffer overflow vulnerability 2008-05-21T00:00+09:00 2008-05-21T00:00+09:00
jvndb-2006-000695 Kmail CGI authentication bypass vulnerability 2008-05-21T00:00+09:00 2008-05-21T00:00+09:00
jvndb-2006-000665 TeraStation HD-HTGL series cross-site request forgery vulnerability 2008-05-21T00:00+09:00 2008-05-21T00:00+09:00
jvndb-2006-000654 SugarCRM cross-site scripting vulnerability 2008-05-21T00:00+09:00 2008-05-21T00:00+09:00
jvndb-2006-000653 Movable Type vulnerabile to cross-site scripting 2008-05-21T00:00+09:00 2008-05-21T00:00+09:00
jvndb-2006-000652 MDPro cross-site scripting vulnerability 2008-05-21T00:00+09:00 2008-05-21T00:00+09:00
ID Description Updated
ID Description Published Updated
suse-su-2025:0588-1 Security update for grub2 2025-02-19T07:30:53Z 2025-02-19T07:30:53Z
suse-su-2025:0587-1 Security update for grub2 2025-02-19T07:29:35Z 2025-02-19T07:29:35Z
suse-su-2025:0586-1 Security update for grub2 2025-02-19T07:28:49Z 2025-02-19T07:28:49Z
suse-su-2025:0585-1 Security update for openssh 2025-02-18T16:42:16Z 2025-02-18T16:42:16Z
suse-su-2025:0583-1 Security update for openvswitch 2025-02-18T15:02:29Z 2025-02-18T15:02:29Z
suse-su-2025:0582-1 Security update for glibc 2025-02-18T14:55:30Z 2025-02-18T14:55:30Z
suse-su-2025:0581-1 Security update for buildah 2025-02-18T14:54:14Z 2025-02-18T14:54:14Z
suse-su-2025:0580-1 Security update for google-osconfig-agent 2025-02-18T14:52:43Z 2025-02-18T14:52:43Z
suse-su-2025:0579-1 Security update for podman 2025-02-18T13:00:26Z 2025-02-18T13:00:26Z
suse-su-2025:0578-1 Security update for openvswitch 2025-02-18T12:53:27Z 2025-02-18T12:53:27Z
suse-su-2025:0576-1 Security update for the Linux Kernel 2025-02-18T12:50:31Z 2025-02-18T12:50:31Z
suse-su-2025:0574-1 Security update for emacs 2025-02-18T09:36:19Z 2025-02-18T09:36:19Z
suse-su-2025:0569-1 Security update for ucode-intel 2025-02-18T06:43:35Z 2025-02-18T06:43:35Z
suse-su-2025:0565-1 Security update for the Linux Kernel 2025-02-17T13:28:23Z 2025-02-17T13:28:23Z
suse-su-2025:0564-1 Security update for the Linux Kernel 2025-02-17T13:26:35Z 2025-02-17T13:26:35Z
suse-su-2025:0562-1 Security update for glibc 2025-02-17T11:44:36Z 2025-02-17T11:44:36Z
suse-su-2025:0561-1 Security update for openvswitch 2025-02-17T10:39:47Z 2025-02-17T10:39:47Z
suse-su-2025:0557-1 Security update for the Linux Kernel 2025-02-14T15:26:53Z 2025-02-14T15:26:53Z
suse-su-2025:0556-1 Security update for the Linux Kernel 2025-02-14T15:26:35Z 2025-02-14T15:26:35Z
suse-su-2025:0555-1 Security update for the Linux Kernel 2025-02-14T15:25:28Z 2025-02-14T15:25:28Z
suse-su-2025:0554-1 Security update for python3 2025-02-14T15:10:53Z 2025-02-14T15:10:53Z
suse-su-2025:0553-1 Security update for python 2025-02-14T15:10:20Z 2025-02-14T15:10:20Z
suse-su-2025:0552-1 Security update for python3 2025-02-14T15:10:11Z 2025-02-14T15:10:11Z
suse-su-2025:0551-1 Security update for python311 2025-02-14T15:09:48Z 2025-02-14T15:09:48Z
suse-su-2025:0548-1 Security update for libtasn1 2025-02-14T10:19:53Z 2025-02-14T10:19:53Z
suse-su-2025:0546-1 Security update golang-github-prometheus-prometheus 2025-02-14T07:24:38Z 2025-02-14T07:24:38Z
suse-su-2025:0545-1 Security update for grafana 2025-02-14T07:24:15Z 2025-02-14T07:24:15Z
suse-su-2025:0532-1 Security update for SUSE Manager Client Tools 2025-02-14T07:20:12Z 2025-02-14T07:20:12Z
suse-su-2025:0525-1 Security update for SUSE Manager Client Tools 2025-02-14T07:18:27Z 2025-02-14T07:18:27Z
suse-su-2025:0524-1 Security update for SUSE Manager Client Tools 2025-02-14T07:16:36Z 2025-02-14T07:16:36Z
ID Description Published Updated
opensuse-su-2024:13112-1 kernel-devel-6.4.9-1.1 on GA media 2024-06-15T00:00:00Z 2024-06-15T00:00:00Z
opensuse-su-2024:13111-1 libopenssl-1_0_0-devel-1.0.2u-22.1 on GA media 2024-06-15T00:00:00Z 2024-06-15T00:00:00Z
opensuse-su-2024:13110-1 java-1_8_0-openj9-1.8.0.372-1.1 on GA media 2024-06-15T00:00:00Z 2024-06-15T00:00:00Z
opensuse-su-2024:13109-1 golang-github-lusitaniae-apache_exporter-1.0.0-1.1 on GA media 2024-06-15T00:00:00Z 2024-06-15T00:00:00Z
opensuse-su-2024:13108-1 tcpreplay-4.4.4-1.1 on GA media 2024-06-15T00:00:00Z 2024-06-15T00:00:00Z
opensuse-su-2024:13107-1 python310-tornado6-6.3.2-2.1 on GA media 2024-06-15T00:00:00Z 2024-06-15T00:00:00Z
opensuse-su-2024:13106-1 hoard-v.1.4.2~0-1.1 on GA media 2024-06-15T00:00:00Z 2024-06-15T00:00:00Z
opensuse-su-2024:13105-1 xen-4.17.1_06-2.1 on GA media 2024-06-15T00:00:00Z 2024-06-15T00:00:00Z
opensuse-su-2024:13104-1 python311-3.11.4-2.1 on GA media 2024-06-15T00:00:00Z 2024-06-15T00:00:00Z
opensuse-su-2024:13103-1 kbfs-6.2.2-2.1 on GA media 2024-06-15T00:00:00Z 2024-06-15T00:00:00Z
opensuse-su-2024:13102-1 ungoogled-chromium-115.0.5790.170-1.1 on GA media 2024-06-15T00:00:00Z 2024-06-15T00:00:00Z
opensuse-su-2024:13101-1 cargo1.71-1.71.1-1.1 on GA media 2024-06-15T00:00:00Z 2024-06-15T00:00:00Z
opensuse-su-2024:13100-1 ungoogled-chromium-115.0.5790.102-1.1 on GA media 2024-06-15T00:00:00Z 2024-06-15T00:00:00Z
opensuse-su-2024:13099-1 python38-3.8.17-2.1 on GA media 2024-06-15T00:00:00Z 2024-06-15T00:00:00Z
opensuse-su-2024:13098-1 pgadmin4-7.4-1.1 on GA media 2024-06-15T00:00:00Z 2024-06-15T00:00:00Z
opensuse-su-2024:13097-1 libopenssl-3-devel-3.1.2-1.1 on GA media 2024-06-15T00:00:00Z 2024-06-15T00:00:00Z
opensuse-su-2024:13096-1 keylime-config-7.4.0-1.1 on GA media 2024-06-15T00:00:00Z 2024-06-15T00:00:00Z
opensuse-su-2024:13095-1 kernel-firmware-20230731-1.1 on GA media 2024-06-15T00:00:00Z 2024-06-15T00:00:00Z
opensuse-su-2024:13094-1 go1.20-1.20.7-1.1 on GA media 2024-06-15T00:00:00Z 2024-06-15T00:00:00Z
opensuse-su-2024:13093-1 go1.19-1.19.12-1.1 on GA media 2024-06-15T00:00:00Z 2024-06-15T00:00:00Z
opensuse-su-2024:13092-1 chromedriver-115.0.5790.170-1.1 on GA media 2024-06-15T00:00:00Z 2024-06-15T00:00:00Z
opensuse-su-2024:13091-1 MozillaThunderbird-102.14.0-1.1 on GA media 2024-06-15T00:00:00Z 2024-06-15T00:00:00Z
opensuse-su-2024:13090-1 libopenssl-1_1-devel-1.1.1v-1.1 on GA media 2024-06-15T00:00:00Z 2024-06-15T00:00:00Z
opensuse-su-2024:13089-1 gstreamer-plugins-ugly-1.22.5-2.1 on GA media 2024-06-15T00:00:00Z 2024-06-15T00:00:00Z
opensuse-su-2024:13088-1 gstreamer-plugins-good-1.22.5-2.1 on GA media 2024-06-15T00:00:00Z 2024-06-15T00:00:00Z
opensuse-su-2024:13087-1 gstreamer-plugins-base-1.22.5-2.1 on GA media 2024-06-15T00:00:00Z 2024-06-15T00:00:00Z
opensuse-su-2024:13086-1 gstreamer-plugins-bad-1.22.5-2.1 on GA media 2024-06-15T00:00:00Z 2024-06-15T00:00:00Z
opensuse-su-2024:13085-1 python39-3.9.17-3.1 on GA media 2024-06-15T00:00:00Z 2024-06-15T00:00:00Z
opensuse-su-2024:13084-1 java-1_8_0-openjdk-1.8.0.382-1.1 on GA media 2024-06-15T00:00:00Z 2024-06-15T00:00:00Z
opensuse-su-2024:13083-1 amanda-3.5.4-1.1 on GA media 2024-06-15T00:00:00Z 2024-06-15T00:00:00Z
ID Description Published Updated
cnvd-2025-22929 JetBrains TeamCity路径遍历漏洞 2025-09-19 2025-09-28
cnvd-2025-22928 JetBrains TeamCity竞争条件漏洞 2025-09-19 2025-09-28
cnvd-2025-22927 Google Chrome V8类型混淆漏洞 2025-09-24 2025-09-28
cnvd-2025-22926 Google Chrome Dawn中释放后重用漏洞 2025-09-24 2025-09-28
cnvd-2025-22925 Google Chrome WebRTC释放后重用漏洞 2025-09-24 2025-09-28
cnvd-2025-22924 Google Chrome堆缓冲区溢出漏洞 2025-09-24 2025-09-28
cnvd-2025-22923 Google Chrome信息泄露漏洞 2025-09-26 2025-09-28
cnvd-2025-22922 Google Chrome整数溢出漏洞(CNVD-2025-22922) 2025-09-26 2025-09-28
cnvd-2025-22921 Google Chrome整数溢出漏洞 2025-09-26 2025-09-28
cnvd-2025-22745 GPT Academic代码执行漏洞 2024-04-10 2025-09-28
cnvd-2025-22744 GPT Academic路径遍历漏洞(CNVD-2025-22744) 2024-10-23 2025-09-28
cnvd-2025-22743 GPT Academic跨站脚本漏洞(CNVD-2025-22743) 2024-10-23 2025-09-28
cnvd-2025-22742 GPT Academic后置链接漏洞 2025-03-07 2025-09-28
cnvd-2025-22741 GPT Academic资源管理错误漏洞 2025-03-27 2025-09-28
cnvd-2025-22740 GPT Academic命令注入漏洞(CNVD-2025-22740) 2025-03-27 2025-09-28
cnvd-2025-22739 GPT Academic路径遍历漏洞(CNVD-2025-22739) 2025-03-27 2025-09-28
cnvd-2025-22738 GPT Academic跨站请求伪造漏洞(CNVD-2025-22738) 2025-03-27 2025-09-28
cnvd-2025-22737 GPT Academic跨站脚本漏洞 2025-03-27 2025-09-28
cnvd-2025-22736 GPT Academic拒绝服务漏洞(CNVD-2025-22736) 2025-03-27 2025-09-28
cnvd-2025-22735 GPT Academic代码问题漏洞 2025-03-27 2025-09-28
cnvd-2025-22734 GPT Academic远程代码执行漏洞 2025-03-27 2025-09-28
cnvd-2025-22733 GPT Academic访问控制错误漏洞 2025-03-27 2025-09-28
cnvd-2025-22732 GPT Academic拒绝服务漏洞(CNVD-2025-22732) 2025-03-27 2025-09-28
cnvd-2025-22731 GPT Academic路径遍历漏洞(CNVD-2025-22731) 2025-03-27 2025-09-28
cnvd-2025-22730 GPT Academic路径遍历漏洞 2025-03-27 2025-09-28
cnvd-2025-22729 GPT Academic命令注入漏洞 2025-03-27 2025-09-28
cnvd-2025-22728 GPT Academic服务器端请求伪造漏洞 2025-03-27 2025-09-28
cnvd-2025-22727 GPT Academic拒绝服务漏洞 2025-03-27 2025-09-28
cnvd-2025-22726 GPT Academic存在未明漏洞 2025-03-27 2025-09-28
cnvd-2025-22725 GPT Academic Markdown_Translate.get_files_from_everything函数服务端请求伪造漏洞 2025-03-27 2025-09-28
ID Description Published Updated
CERTFR-2024-AVI-0833 Multiples vulnérabilités dans les produits Cisco 2024-10-03T00:00:00.000000 2024-10-03T00:00:00.000000
CERTFR-2024-AVI-0832 Vulnérabilité dans Sophos Intercept X 2024-10-03T00:00:00.000000 2024-10-03T00:00:00.000000
CERTFR-2024-AVI-0831 Multiples vulnérabilités dans Suricata 2024-10-03T00:00:00.000000 2024-10-03T00:00:00.000000
certfr-2024-avi-0830 Multiples vulnérabilités dans les produits Axis 2024-10-02T00:00:00.000000 2024-10-02T00:00:00.000000
certfr-2024-avi-0829 Multiples vulnérabilités dans les produits Mozilla 2024-10-02T00:00:00.000000 2024-10-02T00:00:00.000000
certfr-2024-avi-0828 Multiples vulnérabilités dans Google Chrome 2024-10-02T00:00:00.000000 2024-10-02T00:00:00.000000
CERTFR-2024-AVI-0830 Multiples vulnérabilités dans les produits Axis 2024-10-02T00:00:00.000000 2024-10-02T00:00:00.000000
CERTFR-2024-AVI-0829 Multiples vulnérabilités dans les produits Mozilla 2024-10-02T00:00:00.000000 2024-10-02T00:00:00.000000
CERTFR-2024-AVI-0828 Multiples vulnérabilités dans Google Chrome 2024-10-02T00:00:00.000000 2024-10-02T00:00:00.000000
certfr-2024-avi-0827 Vulnérabilité dans les produits Juniper Networks 2024-10-01T00:00:00.000000 2024-10-01T00:00:00.000000
certfr-2024-avi-0826 Multiples vulnérabilités dans les produits Splunk 2024-10-01T00:00:00.000000 2024-10-01T00:00:00.000000
certfr-2024-avi-0825 Vulnérabilité dans NetApp StorageGRID 2024-10-01T00:00:00.000000 2024-10-01T00:00:00.000000
CERTFR-2024-AVI-0827 Vulnérabilité dans les produits Juniper Networks 2024-10-01T00:00:00.000000 2024-10-01T00:00:00.000000
CERTFR-2024-AVI-0826 Multiples vulnérabilités dans les produits Splunk 2024-10-01T00:00:00.000000 2024-10-01T00:00:00.000000
CERTFR-2024-AVI-0825 Vulnérabilité dans NetApp StorageGRID 2024-10-01T00:00:00.000000 2024-10-01T00:00:00.000000
certfr-2024-avi-0824 Multiples vulnérabilités dans Foxit PDF Editor 2024-09-30T00:00:00.000000 2024-09-30T00:00:00.000000
CERTFR-2024-AVI-0824 Multiples vulnérabilités dans Foxit PDF Editor 2024-09-30T00:00:00.000000 2024-09-30T00:00:00.000000
certfr-2024-avi-0823 Multiples vulnérabilités dans le noyau Linux d'Ubuntu 2024-09-27T00:00:00.000000 2024-09-27T00:00:00.000000
certfr-2024-avi-0822 Multiples vulnérabilités dans le noyau Linux de SUSE 2024-09-27T00:00:00.000000 2024-09-27T00:00:00.000000
certfr-2024-avi-0821 Multiples vulnérabilités dans le noyau Linux de Red Hat 2024-09-27T00:00:00.000000 2024-09-27T00:00:00.000000
certfr-2024-avi-0820 Multiples vulnérabilités IBM Cognos Transformer 2024-09-27T00:00:00.000000 2024-09-27T00:00:00.000000
certfr-2024-avi-0819 Multiples vulnérabilités dans Microsoft Edge 2024-09-27T00:00:00.000000 2024-09-27T00:00:00.000000
certfr-2024-avi-0818 Multiples vulnérabilités dans PHP 2024-09-27T00:00:00.000000 2024-09-27T00:00:00.000000
certfr-2024-avi-0817 Vulnérabilité dans Grafana 2024-09-27T00:00:00.000000 2024-09-27T00:00:00.000000
CERTFR-2024-AVI-0823 Multiples vulnérabilités dans le noyau Linux d'Ubuntu 2024-09-27T00:00:00.000000 2024-09-27T00:00:00.000000
CERTFR-2024-AVI-0822 Multiples vulnérabilités dans le noyau Linux de SUSE 2024-09-27T00:00:00.000000 2024-09-27T00:00:00.000000
CERTFR-2024-AVI-0821 Multiples vulnérabilités dans le noyau Linux de Red Hat 2024-09-27T00:00:00.000000 2024-09-27T00:00:00.000000
CERTFR-2024-AVI-0820 Multiples vulnérabilités IBM Cognos Transformer 2024-09-27T00:00:00.000000 2024-09-27T00:00:00.000000
CERTFR-2024-AVI-0819 Multiples vulnérabilités dans Microsoft Edge 2024-09-27T00:00:00.000000 2024-09-27T00:00:00.000000
CERTFR-2024-AVI-0818 Multiples vulnérabilités dans PHP 2024-09-27T00:00:00.000000 2024-09-27T00:00:00.000000
ID CVSS Description Vendor Product Published Updated
ID CVSS Description Vendor Product Published Updated