Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2025-62886 |
8.8 (3.1)
|
WordPress Pricing Table builder plugin <= 1.5.1 - Cros… |
wpdevart |
Pricing Table builder |
2025-10-27T01:33:44.741Z | 2026-01-20T14:28:16.371Z |
| CVE-2025-62885 |
6.5 (3.1)
|
WordPress WP VR plugin <= 8.5.42 - Cross Site Scriptin… |
RexTheme |
WP VR |
2025-10-27T01:33:44.357Z | 2026-01-20T14:28:16.346Z |
| CVE-2025-62884 |
5.3 (3.1)
|
WordPress Coupon Affiliates plugin <= 7.0.3 - Broken A… |
Elliot Sowersby / RelyWP |
Coupon Affiliates |
2025-10-27T01:33:43.969Z | 2026-01-20T14:28:16.310Z |
| CVE-2025-62883 |
4.3 (3.1)
|
WordPress Premmerce User Roles plugin <= 1.0.13 - Brok… |
Premmerce |
Premmerce User Roles |
2025-10-27T01:33:43.581Z | 2026-01-20T14:28:16.387Z |
| CVE-2025-62882 |
4.3 (3.1)
|
WordPress Seriously Simple Podcasting plugin <= 3.13.0… |
Craig Hewitt |
Seriously Simple Podcasting |
2025-10-27T01:33:43.191Z | 2026-01-20T14:28:16.318Z |
| CVE-2025-62881 |
4.3 (3.1)
|
WordPress WP-Lister Lite for eBay plugin <= 3.8.3 - Br… |
WP Lab |
WP-Lister Lite for eBay |
2025-10-27T01:33:42.812Z | 2026-01-20T14:28:16.411Z |
| CVE-2025-62880 |
4.3 (3.1)
|
WordPress Custom 404 Pro plugin <= 3.12.0 - Cross Site… |
Kunal Nagar |
Custom 404 Pro |
2025-12-22T09:31:35.354Z | 2026-01-20T14:28:16.367Z |
| CVE-2025-62874 |
4.3 (3.1)
|
WordPress AnyComment plugin <= 0.3.6 - Broken Access C… |
Alexander |
AnyComment |
2025-12-31T16:42:24.180Z | 2026-01-20T14:28:16.295Z |
| CVE-2025-62873 |
4.3 (3.1)
|
WordPress WP Flashy Marketing Automation plugin <= 2.0… |
Flashyapp |
WP Flashy Marketing Automation |
2025-12-09T14:52:25.051Z | 2026-01-20T14:28:16.351Z |
| CVE-2025-62872 |
4.3 (3.1)
|
WordPress Social Photo Fetcher plugin <= 3.0.4 - Cross… |
JK |
Social Photo Fetcher |
2025-12-09T14:52:24.849Z | 2026-01-20T14:28:16.381Z |
| CVE-2025-62871 |
4.3 (3.1)
|
WordPress Just TinyMCE Custom Styles plugin <= 1.2.1 -… |
Alex Prokopenko / JustCoded |
Just TinyMCE Custom Styles |
2025-12-09T14:52:24.656Z | 2026-01-20T14:28:16.345Z |
| CVE-2025-62870 |
5.3 (3.1)
|
WordPress Eupago Gateway For Woocommerce plugin <= 4.6… |
Eupago |
Eupago Gateway For Woocommerce |
2025-12-09T14:52:24.458Z | 2026-01-20T14:28:16.371Z |
| CVE-2025-62869 |
4.3 (3.1)
|
WordPress Gravitec.net – Web Push Notifications plugin… |
Gravitec.net - Web Push Notifications |
Gravitec.net – Web Push Notifications |
2025-12-09T14:52:24.237Z | 2026-01-20T14:28:16.320Z |
| CVE-2025-62868 |
8.1 (3.1)
|
WordPress Edge CPT plugin <= 1.4 - Local File Inclusio… |
Edge-Themes |
Edge CPT |
2025-10-24T07:52:58.711Z | 2026-01-20T14:28:16.105Z |
| CVE-2025-62867 |
4.3 (3.1)
|
WordPress Ergonet Cache plugin <= 1.0.11 - Broken Acce… |
ergonet |
Ergonet Cache |
2025-12-09T14:52:24.049Z | 2026-01-20T14:28:16.163Z |
| CVE-2025-62866 |
4.3 (3.1)
|
WordPress Auto Alt Text plugin <= 2.5.2 - Cross Site R… |
Valerio Monti |
Auto Alt Text |
2025-12-09T14:52:23.816Z | 2026-01-20T14:28:16.114Z |
| CVE-2025-62865 |
5.3 (3.1)
|
WordPress Post Cloner plugin <= 1.0.0 - Broken Access … |
Evan Herman |
Post Cloner |
2025-12-09T14:52:23.580Z | 2026-01-20T14:28:16.107Z |
| CVE-2025-62762 |
4.3 (3.1)
|
WordPress SMTP Mail plugin <= 1.3.47 - Cross Site Requ… |
photoboxone |
SMTP Mail |
2025-12-09T14:52:23.375Z | 2026-01-20T14:28:16.035Z |
| CVE-2025-62761 |
6.5 (3.1)
|
WordPress Knowledge Base documentation & wiki plugin –… |
BasePress |
Knowledge Base documentation & wiki plugin – BasePress |
2025-12-31T08:44:22.540Z | 2026-01-20T14:28:16.034Z |
| CVE-2025-62760 |
6.5 (3.1)
|
WordPress BuddyPress Activity Shortcode plugin <= 1.1.… |
BuddyDev |
BuddyPress Activity Shortcode |
2025-12-31T08:52:04.460Z | 2026-01-20T14:28:16.033Z |
| CVE-2025-62759 |
6.5 (3.1)
|
WordPress Series plugin <= 2.0.1 - Cross Site Scriptin… |
Justin Tadlock |
Series |
2025-12-31T08:53:31.863Z | 2026-01-20T14:28:16.035Z |
| CVE-2025-62758 |
6.5 (3.1)
|
WordPress Funnelforms Free plugin <= 3.8 - Cross Site … |
Funnelforms |
Funnelforms Free |
2025-12-31T08:55:12.187Z | 2026-01-20T14:28:16.036Z |
| CVE-2025-62757 |
6.5 (3.1)
|
WordPress WebMan Amplifier plugin <= 1.5.12 - Cross Si… |
WebMan Design | Oliver Juhas |
WebMan Amplifier |
2025-12-31T11:53:12.910Z | 2026-01-20T14:28:16.035Z |
| CVE-2025-62756 |
6.5 (3.1)
|
WordPress The Moneytizer plugin <= 10.0.6 - Cross Site… |
lvaudore |
The Moneytizer |
2025-12-31T11:54:40.487Z | 2026-01-20T14:28:16.033Z |
| CVE-2025-62755 |
5.3 (3.1)
|
WordPress GS Portfolio for Envato plugin <= 1.4.2 - Br… |
GS Plugins |
GS Portfolio for Envato |
2025-12-31T15:22:00.836Z | 2026-01-20T14:28:16.089Z |
| CVE-2025-62748 |
6.5 (3.1)
|
WordPress Web and WooCommerce Addons for WPBakery Buil… |
Genetech Products |
Web and WooCommerce Addons for WPBakery Builder |
2025-12-31T12:02:49.488Z | 2026-01-20T14:28:16.305Z |
| CVE-2025-62738 |
5.3 (3.1)
|
WordPress Formstack Online Forms plugin <= 2.0.2 - Bro… |
mmattax |
Formstack Online Forms |
2025-12-09T14:52:22.583Z | 2026-01-20T14:28:16.034Z |
| CVE-2025-62753 |
7.5 (3.1)
|
WordPress MAS Videos plugin <= 1.3.2 - Local File Incl… |
MadrasThemes |
MAS Videos |
2025-12-30T22:37:03.420Z | 2026-01-20T14:28:15.848Z |
| CVE-2025-62752 |
6.5 (3.1)
|
WordPress Calendar.online / Kalender.digital plugin <=… |
kalender.digital |
Calendar.online / Kalender.digital |
2025-12-31T11:57:50.214Z | 2026-01-20T14:28:15.737Z |
| CVE-2025-62751 |
4.3 (3.1)
|
WordPress Vireo theme <= 1.0.24 - Broken Access Contro… |
Extend Themes |
Vireo |
2025-12-31T16:02:50.502Z | 2026-01-20T14:28:15.653Z |
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2026-0975 |
7.8 (3.1)
|
DIAView - Command Injection Vulnerability |
Delta Electronics |
DIAView |
2026-01-16T06:01:59.903Z | 2026-01-16T14:00:54.208Z |
| CVE-2026-22787 |
8.7 (4.0)
|
html2pdf.js has a cross-site scripting vulnerability |
eKoopmans |
html2pdf.js |
2026-01-14T16:52:38.372Z | 2026-01-20T18:37:09.279Z |
| CVE-2025-66019 |
6.6 (4.0)
|
pypdf manipulated LZWDecode streams can exhaust RAM |
py-pdf |
pypdf |
2025-11-25T23:38:12.473Z | 2026-01-20T18:33:02.928Z |
| CVE-2025-45731 |
6.5 (3.1)
|
A group deletion race condition in 2FAuth v5.5.0 … |
n/a |
n/a |
2025-07-24T00:00:00.000Z | 2026-01-20T18:43:16.863Z |
| CVE-2021-36833 |
4.8 (3.1)
|
WordPress MC4WP plugin <= 4.8.6 - Authenticated Stored… |
ibericode |
MC4WP: Mailchimp for WordPress |
2022-05-20T19:55:54.898Z | 2025-02-20T20:22:03.315Z |
| CVE-2025-14737 |
7.1 (4.0)
|
Command Injection Vulnerability in TP-Link WA850RE |
TP-Link Systems Inc. |
WA850RE |
2025-12-18T18:00:29.533Z | 2025-12-19T04:55:47.136Z |
| CVE-2025-65430 |
5.4 (3.1)
|
An issue was discovered in allauth-django before … |
n/a |
n/a |
2025-12-15T00:00:00.000Z | 2025-12-15T15:40:25.050Z |
| CVE-2025-14549 |
6.9 (4.0)
|
OMR on Z processors Exposing a possible buffer over-re… |
Eclipse OMR |
Eclipse OMR |
2025-12-15T05:32:22.095Z | 2025-12-15T16:02:25.978Z |
| CVE-2022-50692 |
6.9 (4.0)
7.5 (3.1)
|
SOUND4 IMPACT/FIRST/PULSE/Eco <=2.x Insufficient Sessi… |
SOUND4 Ltd. |
Impact/Pulse/First |
2025-12-30T22:41:33.949Z | 2026-01-05T19:27:58.810Z |
| CVE-2025-61782 |
5.4 (3.1)
|
Open Redirect in OpenCTI's SAML Authentication Flow |
OpenCTI-Platform |
opencti |
2026-01-07T17:28:53.599Z | 2026-01-07T18:12:58.971Z |
| CVE-2026-21857 |
8.3 (4.0)
|
Redaxo has Path Traversal in Backup Addon Leading to A… |
redaxo |
redaxo |
2026-01-07T22:32:15.859Z | 2026-01-08T18:17:35.890Z |
| CVE-2026-21868 |
7.5 (3.1)
|
Flag Forge has ReDoS Vulnerability in User Profile Loo… |
FlagForgeCTF |
flagForge |
2026-01-08T00:26:46.668Z | 2026-01-08T19:06:16.315Z |
| CVE-2024-58297 |
5.3 (4.0)
|
PyroCMS v3.0.1 Stored Cross-Site Scripting via Admin R… |
Pyrocms |
PyroCMS |
2025-12-11T21:38:30.790Z | 2025-12-16T16:31:23.959Z |
| CVE-2024-6845 |
5.3 (3.1)
|
SmartSearchWP < 2.4.6 - Unauthenticated OpenAI Key Dis… |
Unknown |
Chatbot with ChatGPT WordPress |
2024-09-25T06:00:04.626Z | 2024-09-25T13:43:40.694Z |
| CVE-2026-22851 |
6.9 (4.0)
|
FreeRDP RDPGFX ResetGraphics race leads to use-after-f… |
FreeRDP |
FreeRDP |
2026-01-14T17:43:28.114Z | 2026-01-14T21:03:36.764Z |
| CVE-2024-58287 |
8.7 (4.0)
|
reNgine 2.2.0 Authenticated Command Injection via Scan… |
rengine |
reNgine |
2025-12-11T21:33:35.367Z | 2025-12-18T19:37:26.186Z |
| CVE-2026-22852 |
6.8 (4.0)
|
FreeRDP has a heap-buffer-overflow in audin_process_formats |
FreeRDP |
FreeRDP |
2026-01-14T17:45:22.253Z | 2026-01-16T04:55:46.208Z |
| CVE-2026-22853 |
6.8 (4.0)
|
FreeRDP has a heap-buffer-overflow in ndr_read_uint8Array |
FreeRDP |
FreeRDP |
2026-01-14T17:46:50.159Z | 2026-01-16T04:55:47.314Z |
| CVE-2026-22854 |
6.8 (4.0)
|
FreeRDP has a heap-buffer-overflow in drive_process_irp_read |
FreeRDP |
FreeRDP |
2026-01-14T17:47:49.588Z | 2026-01-16T04:55:48.360Z |
| CVE-2026-21880 |
5.3 (3.1)
|
Kanboard LDAP Injection Vulnerability can Lead to User… |
kanboard |
kanboard |
2026-01-08T00:59:20.338Z | 2026-01-08T18:29:16.406Z |
| CVE-2026-22855 |
5.6 (4.0)
|
FreeRDP has a heap-buffer-overflow in smartcard_unpack… |
FreeRDP |
FreeRDP |
2026-01-14T17:50:06.209Z | 2026-01-14T21:06:26.553Z |
| CVE-2026-22856 |
6.8 (4.0)
|
FreeRDP has a heap-use-after-free in create_irp_thread |
FreeRDP |
FreeRDP |
2026-01-14T17:53:04.756Z | 2026-01-16T04:55:49.425Z |
| CVE-2026-22857 |
6.8 (4.0)
|
FreeRDP has a heap-use-after-free in irp_thread_func |
FreeRDP |
FreeRDP |
2026-01-14T17:53:54.193Z | 2026-01-16T04:55:50.669Z |
| CVE-2026-22858 |
5.6 (4.0)
|
FreeRDP has a global-buffer-overflow in crypto_base64_decode |
FreeRDP |
FreeRDP |
2026-01-14T17:56:29.729Z | 2026-01-14T21:12:03.734Z |
| CVE-2025-67813 |
5.3 (3.1)
|
Quest KACE Desktop Authority through 11.3.1 has I… |
n/a |
n/a |
2026-01-12T00:00:00.000Z | 2026-01-12T16:52:58.820Z |
| CVE-2026-22859 |
5.6 (4.0)
|
FreeRDP has a heap-buffer-overflow in urb_select_confi… |
FreeRDP |
FreeRDP |
2026-01-14T17:57:37.000Z | 2026-01-14T21:13:02.936Z |
| CVE-2026-21892 |
5.3 (3.1)
|
Parsl Monitoring Visualization Vulnerable to SQL Injection |
Parsl |
parsl |
2026-01-08T14:02:15.819Z | 2026-01-08T15:55:18.188Z |
| CVE-2026-21226 |
7.5 (3.1)
|
Azure Core shared client library for Python Remote Cod… |
Microsoft |
Azure Core shared client library for Python |
2026-01-13T18:04:55.084Z | 2026-01-27T19:15:11.760Z |
| CVE-2025-37181 |
7.2 (3.1)
|
Authenticated SQL Injection in EdgeConnect SD-WAN Orch… |
Hewlett Packard Enterprise (HPE) |
EdgeConnect SD-WAN Orchestrator |
2026-01-14T16:26:00.858Z | 2026-01-14T16:44:42.431Z |
| CVE-2025-37182 |
7.2 (3.1)
|
Authenticated SQL Injection in EdgeConnect SD-WAN Orch… |
Hewlett Packard Enterprise (HPE) |
EdgeConnect SD-WAN Orchestrator |
2026-01-14T16:17:12.170Z | 2026-01-14T16:40:21.747Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| fkie_cve-2024-58297 | PyroCMS v3.0.1 contains a stored cross-site scripting vulnerability in the admin redirects configur… | 2025-12-11T22:15:50.903 | 2026-01-20T18:46:15.510 |
| fkie_cve-2024-6845 | The Chatbot with ChatGPT WordPress plugin before 2.4.6 does not have proper authorization in one of… | 2024-09-25T06:15:05.557 | 2026-01-20T18:45:07.460 |
| fkie_cve-2026-22851 | FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.20.1, a race condition … | 2026-01-14T18:16:42.490 | 2026-01-20T18:43:31.587 |
| fkie_cve-2024-58287 | reNgine 2.2.0 contains a command injection vulnerability in the nmap_cmd parameter of scan engine c… | 2025-12-11T22:15:49.217 | 2026-01-20T18:43:16.803 |
| fkie_cve-2026-22852 | FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.20.1, a malicious RDP s… | 2026-01-14T18:16:42.643 | 2026-01-20T18:40:31.943 |
| fkie_cve-2026-22853 | FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.20.1, RDPEAR’s NDR arra… | 2026-01-14T18:16:42.790 | 2026-01-20T18:39:31.770 |
| fkie_cve-2026-22854 | FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.20.1, a heap-buffer-ove… | 2026-01-14T18:16:42.933 | 2026-01-20T18:38:29.257 |
| fkie_cve-2026-21880 | Kanboard is project management software focused on Kanban methodology. Versions 1.2.48 and below ha… | 2026-01-08T02:15:53.650 | 2026-01-20T18:38:16.523 |
| fkie_cve-2026-22855 | FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.20.1, a heap out-of-bou… | 2026-01-14T18:16:43.080 | 2026-01-20T18:36:35.953 |
| fkie_cve-2026-22856 | FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.20.1, a race in the ser… | 2026-01-14T18:16:43.230 | 2026-01-20T18:35:44.933 |
| fkie_cve-2026-22857 | FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.20.1, a heap use-after-… | 2026-01-14T18:16:43.373 | 2026-01-20T18:34:43.760 |
| fkie_cve-2026-22858 | FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.20.1, global-buffer-ove… | 2026-01-14T18:16:43.520 | 2026-01-20T18:33:32.850 |
| fkie_cve-2025-67813 | Quest KACE Desktop Authority through 11.3.1 has Insecure Permissions on the Named Pipes used for in… | 2026-01-12T16:16:04.410 | 2026-01-20T18:33:24.860 |
| fkie_cve-2026-22859 | FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.20.1, the URBDRC client… | 2026-01-14T18:16:43.657 | 2026-01-20T18:31:47.117 |
| fkie_cve-2026-21892 | Parsl is a Python parallel scripting library. A SQL Injection vulnerability exists in the parsl-vis… | 2026-01-08T14:15:57.553 | 2026-01-20T18:28:39.130 |
| fkie_cve-2026-21226 | Deserialization of untrusted data in Azure Core shared client library for Python allows an authoriz… | 2026-01-13T19:16:23.987 | 2026-01-20T18:23:54.057 |
| fkie_cve-2025-37181 | Vulnerabilities in the web-based management interface of EdgeConnect SD-WAN Orchestrator could allo… | 2026-01-14T17:16:05.497 | 2026-01-20T18:17:46.710 |
| fkie_cve-2025-37182 | Vulnerabilities in the web-based management interface of EdgeConnect SD-WAN Orchestrator could allo… | 2026-01-14T17:16:06.030 | 2026-01-20T18:17:30.787 |
| fkie_cve-2025-37183 | Vulnerabilities in the web-based management interface of EdgeConnect SD-WAN Orchestrator could allo… | 2026-01-14T17:16:06.163 | 2026-01-20T18:17:09.910 |
| fkie_cve-2025-56154 | htmly v3.0.8 is vulnerable to Cross Site Scripting (XSS) in the /author/:name endpoint of the affec… | 2025-10-02T16:15:34.773 | 2026-01-20T18:16:04.927 |
| fkie_cve-2025-13151 | Stack-based buffer overflow in libtasn1 version: v4.20.0. The function fails to validate the size o… | 2026-01-07T22:15:43.200 | 2026-01-20T18:16:01.827 |
| fkie_cve-2025-37184 | A vulnerability exists in an Orchestrator service that could allow an unauthenticated remote attack… | 2026-01-14T17:16:06.300 | 2026-01-20T18:15:55.017 |
| fkie_cve-2026-22032 | Directus is a real-time API and App dashboard for managing SQL database content. Prior to version 1… | 2026-01-08T15:15:45.000 | 2026-01-20T18:15:40.300 |
| fkie_cve-2026-21879 | Kanboard is project management software focused on Kanban methodology. Versions 1.2.48 and below ar… | 2026-01-08T02:15:53.490 | 2026-01-20T18:15:10.597 |
| fkie_cve-2025-37185 | Vulnerabilities in the web-based management interface of EdgeConnect SD-WAN Orchestrator could allo… | 2026-01-14T17:16:06.437 | 2026-01-20T18:14:09.340 |
| fkie_cve-2025-64503 | cups-filters contains backends, filters, and other software required to get the cups printing servi… | 2025-11-12T22:15:50.293 | 2026-01-20T18:12:40.827 |
| fkie_cve-2025-57812 | CUPS is a standards-based, open-source printing system, and `libcupsfilters` contains the code of t… | 2025-11-12T19:15:36.753 | 2026-01-20T18:11:14.850 |
| fkie_cve-2025-71023 | Tenda AX-3 v16.03.12.10_CN was discovered to contain a stack overflow in the mac2 parameter of the … | 2026-01-13T16:16:05.200 | 2026-01-20T18:04:49.637 |
| fkie_cve-2022-50939 | e107 CMS version 3.2.1 contains a critical file upload vulnerability that allows authenticated admi… | 2026-01-13T23:15:59.233 | 2026-01-20T18:03:06.060 |
| fkie_cve-2022-50936 | WBCE CMS version 1.5.2 contains an authenticated remote code execution vulnerability that allows at… | 2026-01-13T23:15:58.703 | 2026-01-20T17:58:42.253 |
| ID | Severity | Description | Published | Updated |
|---|---|---|---|---|
| ghsa-7fpm-j8mp-fp7x |
7.5 (3.1)
|
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… | 2025-11-06T18:32:55Z | 2026-01-20T15:31:49Z |
| ghsa-6799-fjfp-m83v |
10.0 (3.1)
|
Unrestricted Upload of File with Dangerous Type vulnerability in Addify Custom User Registration Fi… | 2025-11-06T18:32:55Z | 2026-01-20T15:31:49Z |
| ghsa-648j-fchv-3hrv |
7.5 (3.1)
|
Insertion of Sensitive Information Into Sent Data vulnerability in Vito Peleg Atarim atarim-visual-… | 2025-11-06T18:32:55Z | 2026-01-20T15:31:49Z |
| ghsa-63c7-4m6v-4j8p |
8.1 (3.1)
|
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… | 2025-11-06T18:32:54Z | 2026-01-20T15:31:49Z |
| ghsa-6274-x8vj-52cw |
8.1 (3.1)
|
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… | 2025-11-06T18:32:55Z | 2026-01-20T15:31:49Z |
| ghsa-5qc6-qfj6-rfxv |
6.5 (3.1)
|
Missing Authorization vulnerability in ganddser Jock On Air Now (JOAN) joan allows Exploiting Incor… | 2025-11-06T18:32:54Z | 2026-01-20T15:31:49Z |
| ghsa-4px4-qq7x-7w9j |
7.5 (3.1)
|
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… | 2025-11-06T18:32:55Z | 2026-01-20T15:31:49Z |
| ghsa-4gh8-cr63-898j |
7.2 (3.1)
|
Path Traversal: '.../...//' vulnerability in Dmitry V. (CEO of "UKR Solution") Barcode Scanner with… | 2025-11-06T18:32:54Z | 2026-01-20T15:31:49Z |
| ghsa-445f-486h-qh76 |
4.8 (3.1)
|
Unrestricted Upload of File with Dangerous Type vulnerability in Vito Peleg Atarim atarim-visual-co… | 2025-11-06T18:32:55Z | 2026-01-20T15:31:49Z |
| ghsa-xg8f-g55r-6q3h |
9.8 (3.1)
|
Deserialization of Untrusted Data vulnerability in VictorThemes Seil seil allows Object Injection.T… | 2025-11-06T18:32:53Z | 2026-01-20T15:31:48Z |
| ghsa-wm3r-xgh7-77jf |
5.4 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-11-06T18:32:54Z | 2026-01-20T15:31:48Z |
| ghsa-whm5-j2cq-jjh4 |
6.1 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-11-06T18:32:53Z | 2026-01-20T15:31:48Z |
| ghsa-vqw7-x8r5-hmjx |
9.8 (3.1)
|
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability … | 2025-11-06T18:32:53Z | 2026-01-20T15:31:48Z |
| ghsa-vpqx-2jhq-wrpw |
10.0 (3.1)
|
Unrestricted Upload of File with Dangerous Type vulnerability in borisolhor Drop Uploader for CF7 -… | 2025-11-06T18:32:53Z | 2026-01-20T15:31:48Z |
| ghsa-vfv7-fp4j-fvpr |
7.1 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-11-06T18:32:54Z | 2026-01-20T15:31:48Z |
| ghsa-rrf9-p43r-8gmm |
7.5 (3.1)
|
Missing Authorization vulnerability in kamleshyadav Miraculous miraculous allows Exploiting Incorre… | 2025-11-06T18:32:54Z | 2026-01-20T15:31:48Z |
| ghsa-qqwg-wprf-h8ff |
8.1 (3.1)
|
Deserialization of Untrusted Data vulnerability in Cozmoslabs TranslatePress translatepress-multili… | 2025-11-06T18:32:54Z | 2026-01-20T15:31:48Z |
| ghsa-qqmx-f7c6-cqmp |
7.1 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-11-06T18:32:54Z | 2026-01-20T15:31:48Z |
| ghsa-qmvr-vqwv-566v |
5.3 (3.1)
|
Missing Authorization vulnerability in Jthemes imEvent imevent allows Accessing Functionality Not P… | 2025-11-06T18:32:54Z | 2026-01-20T15:31:48Z |
| ghsa-qc98-fx88-c58q |
7.1 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-11-06T18:32:54Z | 2026-01-20T15:31:48Z |
| ghsa-j9c7-gf84-2wqg |
6.1 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-11-06T18:32:54Z | 2026-01-20T15:31:48Z |
| ghsa-hrj4-vcrc-2hch |
7.1 (3.1)
|
Missing Authorization vulnerability in bPlugins Info Cards info-cards allows Accessing Functionalit… | 2025-11-06T18:32:54Z | 2026-01-20T15:31:48Z |
| ghsa-hqcq-5vqf-g22m |
7.1 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-11-06T18:32:54Z | 2026-01-20T15:31:48Z |
| ghsa-hc8c-89gg-5q5v |
9.8 (3.1)
|
Deserialization of Untrusted Data vulnerability in CRM Perks WP Gravity Forms Keap/Infusionsoft gf-… | 2025-11-06T18:32:54Z | 2026-01-20T15:31:48Z |
| ghsa-fpvx-h7cq-jphj |
7.1 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-11-06T18:32:54Z | 2026-01-20T15:31:48Z |
| ghsa-fc2m-qm5j-pmj5 |
9.1 (3.1)
|
Missing Authorization vulnerability in sertifier Sertifier Certificate & Badge Maker sertifier-cert… | 2025-11-06T18:32:53Z | 2026-01-20T15:31:48Z |
| ghsa-f5mm-444h-94q4 |
5.4 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-11-06T18:32:53Z | 2026-01-20T15:31:48Z |
| ghsa-cxw3-8hp5-fg86 |
6.1 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-11-06T18:32:54Z | 2026-01-20T15:31:48Z |
| ghsa-c9jj-ghwx-hh7x |
6.1 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-11-06T18:32:53Z | 2026-01-20T15:31:48Z |
| ghsa-97fx-g7m5-mqpj |
6.1 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-11-06T18:32:53Z | 2026-01-20T15:31:48Z |
| ID | Severity | Description | Package | Published | Updated |
|---|---|---|---|---|---|
| pysec-2020-163 |
|
A flaw was found in all python-ecdsa versions before 0.13.3, where it did not correctly v… | ecdsa | 2020-01-02T15:15:00Z | 2020-12-08T18:32:00Z |
| pysec-2020-68 |
|
OAuthenticator is an OAuth login mechanism for JupyterHub. In oauthenticator from version… | oauthenticator | 2020-12-01T21:15:00Z | 2020-12-08T17:50:00Z |
| pysec-2020-69 |
|
Python oic is a Python OpenID Connect implementation. In Python oic before version 1.2.1,… | oic | 2020-12-02T20:15:00Z | 2020-12-08T02:37:00Z |
| pysec-2020-108 |
|
** DISPUTED ** svm_predict_values in svm.cpp in Libsvm v324, as used in scikit-learn 0.23… | scikit-learn | 2020-11-21T21:15:00Z | 2020-12-03T18:50:00Z |
| pysec-2020-75 |
|
petl before 1.68, in some configurations, allows resolution of entities in an XML document. | petl | 2020-11-26T05:15:00Z | 2020-12-03T16:48:00Z |
| pysec-2020-74 |
|
Multiple cross-site scripting (XSS) vulnerabilities in Papermerge before 1.5.2 allow remo… | papermerge | 2020-12-02T08:15:00Z | 2020-12-02T16:29:00Z |
| pysec-2020-29 |
|
A buffer overflow exists in the Brotli library versions prior to 1.0.8 where an attacker … | brotli | 2020-09-15T10:15:00Z | 2020-12-02T12:15:00Z |
| pysec-2020-157 |
|
Open redirect vulnerability in werkzeug before 0.11.6 via a double slash in the URL. | werkzeug | 2020-11-18T15:15:00Z | 2020-12-01T16:05:00Z |
| pysec-2020-18 |
|
The previous default setting for Airflow's Experimental API was to allow all API requests… | apache-airflow | 2020-11-10T16:15:00Z | 2020-11-24T17:29:00Z |
| pysec-2020-67 |
|
The cache action in action/cache.py in MoinMoin through 1.9.10 allows directory traversal… | moin | 2020-11-10T17:15:00Z | 2020-11-24T17:20:00Z |
| pysec-2020-159 |
|
In Alerta before version 8.1.0, users may be able to bypass LDAP authentication if they p… | alerta-server | 2020-11-06T18:15:00Z | 2020-11-17T21:08:00Z |
| pysec-2020-60 |
|
A stored cross-site scripting (XSS) vulnerability affects the Web UI in Locust before 1.3… | locust | 2020-11-09T21:15:00Z | 2020-11-17T20:37:00Z |
| pysec-2020-61 |
|
In lookatme (python/pypi package) versions prior to 2.3.0, the package automatically load… | lookatme | 2020-10-26T18:15:00Z | 2020-11-13T16:40:00Z |
| pysec-2020-142 |
|
A mis-handling of invalid unicode characters in the Java implementation of Tink versions … | tink | 2020-10-19T13:15:00Z | 2020-10-29T22:16:00Z |
| pysec-2020-134 |
|
In TensorFlow Lite before versions 1.15.4, 2.0.3, 2.1.2, 2.2.1 and 2.3.1, saved models in… | tensorflow | 2020-09-25T19:15:00Z | 2020-10-29T16:15:00Z |
| pysec-2020-133 |
|
In tensorflow-lite before versions 1.15.4, 2.0.3, 2.1.2, 2.2.1 and 2.3.1, if a TFLite sav… | tensorflow | 2020-09-25T19:15:00Z | 2020-10-29T16:15:00Z |
| pysec-2020-132 |
|
In tensorflow-lite before versions 1.15.4, 2.0.3, 2.1.2, 2.2.1 and 2.3.1, a crafted TFLit… | tensorflow | 2020-09-25T19:15:00Z | 2020-10-29T16:15:00Z |
| pysec-2020-131 |
|
In tensorflow-lite before versions 1.15.4, 2.0.3, 2.1.2, 2.2.1 and 2.3.1, when determinin… | tensorflow | 2020-09-25T19:15:00Z | 2020-10-29T16:15:00Z |
| pysec-2020-130 |
|
In tensorflow-lite before versions 1.15.4, 2.0.3, 2.1.2, 2.2.1 and 2.3.1, to mimic Python… | tensorflow | 2020-09-25T19:15:00Z | 2020-10-29T16:15:00Z |
| pysec-2020-129 |
|
In Tensorflow before versions 1.15.4, 2.0.3, 2.1.2, 2.2.1 and 2.3.1, changing the TensorF… | tensorflow | 2020-09-25T19:15:00Z | 2020-10-29T16:15:00Z |
| pysec-2020-128 |
|
In Tensorflow before versions 1.15.4, 2.0.3, 2.1.2, 2.2.1 and 2.3.1, the `data_splits` ar… | tensorflow | 2020-09-25T19:15:00Z | 2020-10-29T16:15:00Z |
| pysec-2020-127 |
|
In eager mode, TensorFlow before versions 1.15.4, 2.0.3, 2.1.2, 2.2.1 and 2.3.1 does not … | tensorflow | 2020-09-25T19:15:00Z | 2020-10-29T16:15:00Z |
| pysec-2020-126 |
|
In Tensorflow before versions 1.15.4, 2.0.3, 2.1.2, 2.2.1 and 2.3.1, by controlling the `… | tensorflow | 2020-09-25T19:15:00Z | 2020-10-29T16:15:00Z |
| pysec-2020-125 |
|
In Tensorflow before versions 1.15.4, 2.0.3, 2.1.2, 2.2.1 and 2.3.1, the `Shard` API in T… | tensorflow | 2020-09-25T19:15:00Z | 2020-10-29T16:15:00Z |
| pysec-2020-118 |
|
In Tensorflow before versions 1.15.4, 2.0.3, 2.1.2, 2.2.1 and 2.3.1, the implementation o… | tensorflow | 2020-09-25T19:15:00Z | 2020-10-29T16:15:00Z |
| pysec-2020-113 |
|
In Tensorflow before versions 1.15.4, 2.0.3, 2.1.2, 2.2.1 and 2.3.1, the `tf.raw_ops.Swit… | tensorflow | 2020-09-25T19:15:00Z | 2020-10-29T16:15:00Z |
| pysec-2020-59 |
|
** DISPUTED ** TAXII libtaxii through 1.1.117, as used in EclecticIQ OpenTAXII through 0.… | libtaxii | 2020-10-17T20:15:00Z | 2020-10-27T19:51:00Z |
| pysec-2020-174 |
|
In postfix-mta-sts-resolver before 0.5.1, All users can receive incorrect response from d… | postfix-mta-sts-resolver | 2020-01-22T02:15:00Z | 2020-10-23T18:18:00Z |
| pysec-2020-158 |
|
In xmpp-http-upload before version 0.4.0, when the GET method is attacked, attackers can … | xmpp-http-upload | 2020-10-06T19:15:00Z | 2020-10-23T03:09:00Z |
| pysec-2019-78 |
|
A vulnerability was found in ceilometer before version 12.0.0.0rc1. An Information Exposu… | ceilometer | 2019-03-26T18:29:00Z | 2020-10-22T14:44:00Z |
| ID | Description | Updated |
|---|---|---|
| gsd-2024-31879 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:20.613249Z |
| gsd-2024-31878 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:20.644165Z |
| gsd-2024-31877 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:20.738866Z |
| gsd-2024-31876 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:20.852450Z |
| gsd-2024-31875 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:20.631317Z |
| gsd-2024-31874 | IBM Security Verify Access Appliance 10.0.0 through 10.0.7 uses uninitialized variables w… | 2024-04-11T05:03:20.620935Z |
| gsd-2024-31873 | IBM Security Verify Access Appliance 10.0.0 through 10.0.7 contains hard-coded credential… | 2024-04-11T05:03:20.600390Z |
| gsd-2024-31872 | IBM Security Verify Access Appliance 10.0.0 through 10.0.7 could allow a malicious actor … | 2024-04-11T05:03:20.879975Z |
| gsd-2024-31871 | IBM Security Verify Access Appliance 10.0.0 through 10.0.7 could allow a malicious actor … | 2024-04-11T05:03:20.860309Z |
| gsd-2024-31870 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:20.836350Z |
| gsd-2024-31869 | Airflow versions 2.7.0 through 2.8.4 have a vulnerability that allows an authenticated us… | 2024-04-11T05:03:20.611210Z |
| gsd-2024-31868 | Improper Encoding or Escaping of Output vulnerability in Apache Zeppelin. The attackers … | 2024-04-11T05:03:20.618204Z |
| gsd-2024-31867 | Improper Input Validation vulnerability in Apache Zeppelin. The attackers can execute ma… | 2024-04-11T05:03:20.546342Z |
| gsd-2024-31866 | Improper Encoding or Escaping of Output vulnerability in Apache Zeppelin. The attackers … | 2024-04-11T05:03:20.849640Z |
| gsd-2024-31865 | Improper Input Validation vulnerability in Apache Zeppelin. The attackers can call updat… | 2024-04-11T05:03:20.805627Z |
| gsd-2024-31864 | Improper Control of Generation of Code ('Code Injection') vulnerability in Apache Zeppeli… | 2024-04-11T05:03:20.703763Z |
| gsd-2024-31863 | Authentication Bypass by Spoofing vulnerability by replacing to exsiting notes in Apache … | 2024-04-11T05:03:20.591588Z |
| gsd-2024-31862 | Improper Input Validation vulnerability in Apache Zeppelin when creating a new note from … | 2024-04-11T05:03:20.755438Z |
| gsd-2024-31861 | Improper Control of Generation of Code ('Code Injection') vulnerability in Apache Zeppeli… | 2024-04-11T05:03:20.515250Z |
| gsd-2024-31860 | Improper Input Validation vulnerability in Apache Zeppelin. By adding relative path indi… | 2024-04-11T05:03:20.630164Z |
| gsd-2024-31855 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:20.652733Z |
| gsd-2024-31854 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:20.622258Z |
| gsd-2024-31853 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:20.771877Z |
| gsd-2024-31852 | LLVM before 18.1.3 generates code in which the LR register can be overwritten without dat… | 2024-04-11T05:03:20.662379Z |
| gsd-2024-31851 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:20.587536Z |
| gsd-2024-31850 | A path traversal vulnerability exists in the Java version of CData Arc < 23.4.8839 when r… | 2024-04-11T05:03:20.743412Z |
| gsd-2024-31849 | A path traversal vulnerability exists in the Java version of CData Connect < 23.4.8846 wh… | 2024-04-11T05:03:20.874114Z |
| gsd-2024-31848 | A path traversal vulnerability exists in the Java version of CData API Server < 23.4.8844… | 2024-04-11T05:03:20.859421Z |
| gsd-2024-31847 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:20.650306Z |
| gsd-2024-31846 | An issue was discovered in Italtel Embrace 1.6.4. The web application does not restrict o… | 2024-04-11T05:03:20.765091Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| mal-0000-reversing-labs-252e425e15e2b598 | 2025-12-23T08:39:02Z | 2025-12-23T08:39:02Z | |
| MAL-0000-REVERSING-LABS-252E425E15E2B598 | 2025-12-23T08:39:02Z | 2025-12-23T08:39:02Z | |
| mal-0000-reversing-labs-2e053e7e073ce3e8 | 2025-12-23T08:39:01Z | 2025-12-23T08:39:01Z | |
| MAL-0000-REVERSING-LABS-2E053E7E073CE3E8 | 2025-12-23T08:39:01Z | 2025-12-23T08:39:01Z | |
| mal-0000-reversing-labs-4b82d3906b35e14e | 2025-12-23T08:38:58Z | 2025-12-23T08:38:58Z | |
| MAL-0000-REVERSING-LABS-4B82D3906B35E14E | 2025-12-23T08:38:58Z | 2025-12-23T08:38:58Z | |
| mal-0000-reversing-labs-cfa1c23a3a97268a | 2025-12-23T08:38:57Z | 2025-12-23T08:38:57Z | |
| MAL-0000-REVERSING-LABS-CFA1C23A3A97268A | 2025-12-23T08:38:57Z | 2025-12-23T08:38:57Z | |
| mal-0000-reversing-labs-d06059887d6f955e | 2025-12-23T08:38:56Z | 2025-12-23T08:38:56Z | |
| MAL-0000-REVERSING-LABS-D06059887D6F955E | 2025-12-23T08:38:56Z | 2025-12-23T08:38:56Z | |
| mal-0000-reversing-labs-13a37dc9fbda2498 | 2025-12-23T08:38:43Z | 2025-12-23T08:38:43Z | |
| MAL-0000-REVERSING-LABS-13A37DC9FBDA2498 | 2025-12-23T08:38:43Z | 2025-12-23T08:38:43Z | |
| mal-0000-reversing-labs-b74fc5669380714b | 2025-12-23T08:38:42Z | 2025-12-23T08:38:42Z | |
| MAL-0000-REVERSING-LABS-B74FC5669380714B | 2025-12-23T08:38:42Z | 2025-12-23T08:38:42Z | |
| mal-0000-reversing-labs-1d238807f0d58db3 | 2025-12-23T08:38:41Z | 2025-12-23T08:38:41Z | |
| MAL-0000-REVERSING-LABS-1D238807F0D58DB3 | 2025-12-23T08:38:41Z | 2025-12-23T08:38:41Z | |
| mal-0000-reversing-labs-cfebc5d414f6860c | 2025-12-23T08:38:40Z | 2025-12-23T08:38:40Z | |
| MAL-0000-REVERSING-LABS-CFEBC5D414F6860C | 2025-12-23T08:38:40Z | 2025-12-23T08:38:40Z | |
| mal-0000-reversing-labs-ca866d4245ec47c1 | 2025-12-23T08:38:39Z | 2025-12-23T08:38:39Z | |
| MAL-0000-REVERSING-LABS-CA866D4245EC47C1 | 2025-12-23T08:38:39Z | 2025-12-23T08:38:39Z | |
| mal-0000-reversing-labs-fdaa8857b20d9ea1 | 2025-12-23T08:38:36Z | 2025-12-23T08:38:36Z | |
| MAL-0000-REVERSING-LABS-FDAA8857B20D9EA1 | 2025-12-23T08:38:36Z | 2025-12-23T08:38:36Z | |
| mal-2025-192893 | Malicious code in fireeye-main (PyPI) | 2025-12-23T08:38:27Z | 2025-12-23T08:38:27Z |
| mal-2025-192892 | Malicious code in fire-eye-bcs (PyPI) | 2025-12-23T08:38:27Z | 2025-12-23T08:38:27Z |
| mal-0000-reversing-labs-3e7b8324c03867d3 | 2025-12-23T08:38:27Z | 2025-12-23T08:38:27Z | |
| mal-0000-reversing-labs-305cde09419a7457 | 2025-12-23T08:38:27Z | 2025-12-23T08:38:27Z | |
| MAL-2025-192893 | Malicious code in fireeye-main (PyPI) | 2025-12-23T08:38:27Z | 2025-12-23T08:38:27Z |
| MAL-2025-192892 | Malicious code in fire-eye-bcs (PyPI) | 2025-12-23T08:38:27Z | 2025-12-23T08:38:27Z |
| MAL-0000-REVERSING-LABS-3E7B8324C03867D3 | 2025-12-23T08:38:27Z | 2025-12-23T08:38:27Z | |
| MAL-0000-REVERSING-LABS-305CDE09419A7457 | 2025-12-23T08:38:27Z | 2025-12-23T08:38:27Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| wid-sec-w-2025-0019 | Red Hat JBoss Enterprise Application Platform: Mehrere Schwachstellen | 2020-10-13T22:00:00.000+00:00 | 2025-01-07T23:00:00.000+00:00 |
| wid-sec-w-2025-0018 | Ruby: Schwachstelle ermöglicht Offenlegung von Informationen | 2025-01-07T23:00:00.000+00:00 | 2025-01-07T23:00:00.000+00:00 |
| wid-sec-w-2024-3405 | Broadcom Fabric OS: Mehrere Schwachstellen | 2024-11-11T23:00:00.000+00:00 | 2025-01-07T23:00:00.000+00:00 |
| wid-sec-w-2024-3141 | Mitel MiCollab: Mehrere Schwachstellen | 2024-10-09T22:00:00.000+00:00 | 2025-01-07T23:00:00.000+00:00 |
| wid-sec-w-2024-3049 | Apache Lucene Replicator: Schwachstelle ermöglicht nicht spezifizierten Angriff | 2024-09-29T22:00:00.000+00:00 | 2025-01-07T23:00:00.000+00:00 |
| wid-sec-w-2024-2208 | CODESYS: Schwachstelle ermöglicht Denial of Service | 2024-09-23T22:00:00.000+00:00 | 2025-01-07T23:00:00.000+00:00 |
| wid-sec-w-2024-2207 | Red Hat Enterprise Linux: Mehrere Schwachstellen ermöglichen Privilegieneskalation und Codeausführung | 2024-09-23T22:00:00.000+00:00 | 2025-01-07T23:00:00.000+00:00 |
| wid-sec-w-2024-1310 | IBM Java SDK: Schwachstelle ermöglicht Denial of Service | 2024-06-06T22:00:00.000+00:00 | 2025-01-07T23:00:00.000+00:00 |
| wid-sec-w-2024-1285 | CODESYS: Mehrere Schwachstellen | 2024-06-03T22:00:00.000+00:00 | 2025-01-07T23:00:00.000+00:00 |
| wid-sec-w-2024-0997 | Tinyproxy: Mehrere Schwachstellen | 2024-05-01T22:00:00.000+00:00 | 2025-01-07T23:00:00.000+00:00 |
| wid-sec-w-2024-0943 | CODESYS: Mehrere Schwachstellen | 2024-04-21T22:00:00.000+00:00 | 2025-01-07T23:00:00.000+00:00 |
| wid-sec-w-2024-0093 | OpenSSL: Schwachstelle ermöglicht Denial of Service | 2024-01-15T23:00:00.000+00:00 | 2025-01-07T23:00:00.000+00:00 |
| wid-sec-w-2023-1272 | Red Hat JBoss Enterprise Application Platform: Mehrere Schwachstellen | 2021-03-16T23:00:00.000+00:00 | 2025-01-07T23:00:00.000+00:00 |
| wid-sec-w-2022-0179 | E2FSProgs: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen | 2022-05-16T22:00:00.000+00:00 | 2025-01-07T23:00:00.000+00:00 |
| wid-sec-w-2025-0015 | Progress Software Sitefinity: Mehrere Schwachstellen | 2025-01-06T23:00:00.000+00:00 | 2025-01-06T23:00:00.000+00:00 |
| wid-sec-w-2025-0014 | Samsung Android: Mehrere Schwachstellen | 2025-01-06T23:00:00.000+00:00 | 2025-01-06T23:00:00.000+00:00 |
| wid-sec-w-2025-0013 | Google Android: Mehrere Schwachstellen | 2025-01-06T23:00:00.000+00:00 | 2025-01-06T23:00:00.000+00:00 |
| wid-sec-w-2025-0012 | OpenVPN Connect: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen | 2025-01-06T23:00:00.000+00:00 | 2025-01-06T23:00:00.000+00:00 |
| wid-sec-w-2024-1801 | SaltStack Salt: Mehrere Schwachstellen | 2020-11-03T23:00:00.000+00:00 | 2025-01-06T23:00:00.000+00:00 |
| wid-sec-w-2024-0578 | Apple macOS: Mehrere Schwachstellen | 2024-03-07T23:00:00.000+00:00 | 2025-01-06T23:00:00.000+00:00 |
| wid-sec-w-2023-2412 | Internet Systems Consortium BIND: Mehrere Schwachstellen | 2023-09-20T22:00:00.000+00:00 | 2025-01-06T23:00:00.000+00:00 |
| wid-sec-w-2023-0513 | Python: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen | 2023-02-28T23:00:00.000+00:00 | 2025-01-06T23:00:00.000+00:00 |
| wid-sec-w-2023-0426 | IBM Spectrum Protect: Mehrere Schwachstellen | 2022-03-13T23:00:00.000+00:00 | 2025-01-06T23:00:00.000+00:00 |
| wid-sec-w-2022-0701 | Angular: Schwachstelle ermöglicht Cross-Site Scripting | 2022-07-17T22:00:00.000+00:00 | 2025-01-06T23:00:00.000+00:00 |
| wid-sec-w-2025-0010 | HCL BigFix Server Automation: Mehrere Schwachstellen | 2025-01-05T23:00:00.000+00:00 | 2025-01-05T23:00:00.000+00:00 |
| wid-sec-w-2025-0008 | F5 BIG-IP: Schwachstelle ermöglicht Denial of Service und Informationsoffenlegung | 2025-01-05T23:00:00.000+00:00 | 2025-01-05T23:00:00.000+00:00 |
| wid-sec-w-2025-0007 | Samsung Exynos: Mehrere Schwachstellen ermöglichen Denial of Service | 2025-01-05T23:00:00.000+00:00 | 2025-01-05T23:00:00.000+00:00 |
| wid-sec-w-2024-3445 | Microsoft Windows: Mehrere Schwachstellen | 2024-11-12T23:00:00.000+00:00 | 2025-01-05T23:00:00.000+00:00 |
| wid-sec-w-2024-0955 | HCL Domino Blog Template: Schwachstelle ermöglicht Codeausführung und Denial of Service | 2024-04-23T22:00:00.000+00:00 | 2025-01-05T23:00:00.000+00:00 |
| wid-sec-w-2024-0022 | IBM DB2: Mehrere Schwachstellen | 2024-01-08T23:00:00.000+00:00 | 2025-01-05T23:00:00.000+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| rhsa-2025:18218 | Red Hat Security Advisory: OpenShift Container Platform 4.17.42 bug fix and security update | 2025-10-22T05:09:35+00:00 | 2026-01-22T16:46:59+00:00 |
| rhsa-2025:18217 | Red Hat Security Advisory: OpenShift Container Platform 4.19.17 bug fix and security update | 2025-10-22T06:20:41+00:00 | 2026-01-22T16:46:58+00:00 |
| rhsa-2025:15827 | Red Hat Security Advisory: updated web-terminal/tooling container image | 2025-09-15T15:13:16+00:00 | 2026-01-22T16:46:57+00:00 |
| rhsa-2025:15397 | Red Hat Security Advisory: OpenShift Container Platform 4.20.0 bug fix and security update | 2025-10-21T14:50:28+00:00 | 2026-01-22T16:46:57+00:00 |
| rhsa-2025:12904 | Red Hat Security Advisory: sqlite security update | 2025-08-05T07:29:23+00:00 | 2026-01-22T16:46:57+00:00 |
| rhsa-2025:14101 | Red Hat Security Advisory: mingw-sqlite security update | 2025-08-19T15:29:57+00:00 | 2026-01-22T16:46:56+00:00 |
| rhsa-2025:13335 | Red Hat Security Advisory: Insights proxy Container Image | 2025-08-07T07:50:20+00:00 | 2026-01-22T16:46:55+00:00 |
| rhsa-2025:12905 | Red Hat Security Advisory: sqlite security update | 2025-08-05T06:51:48+00:00 | 2026-01-22T16:46:54+00:00 |
| rhsa-2025:12901 | Red Hat Security Advisory: sqlite security update | 2025-08-05T06:41:18+00:00 | 2026-01-22T16:46:54+00:00 |
| rhsa-2025:12749 | Red Hat Security Advisory: sqlite security update | 2025-08-04T16:35:34+00:00 | 2026-01-22T16:46:52+00:00 |
| rhsa-2025:12522 | Red Hat Security Advisory: sqlite security update | 2025-08-04T15:19:33+00:00 | 2026-01-22T16:46:52+00:00 |
| rhsa-2025:12521 | Red Hat Security Advisory: sqlite security update | 2025-08-04T15:41:21+00:00 | 2026-01-22T16:46:52+00:00 |
| rhsa-2025:12349 | Red Hat Security Advisory: sqlite security update | 2025-07-31T06:47:14+00:00 | 2026-01-22T16:46:51+00:00 |
| rhsa-2025:12036 | Red Hat Security Advisory: sqlite security update | 2025-07-29T08:00:29+00:00 | 2026-01-22T16:46:51+00:00 |
| rhsa-2025:12010 | Red Hat Security Advisory: sqlite security update | 2025-07-28T22:12:48+00:00 | 2026-01-22T16:46:50+00:00 |
| rhsa-2025:11992 | Red Hat Security Advisory: sqlite security update | 2025-07-28T18:19:49+00:00 | 2026-01-22T16:46:50+00:00 |
| rhsa-2025:11933 | Red Hat Security Advisory: sqlite security update | 2025-07-28T14:46:09+00:00 | 2026-01-22T16:46:49+00:00 |
| rhsa-2025:11803 | Red Hat Security Advisory: nodejs:22 security update | 2025-07-28T01:55:01+00:00 | 2026-01-22T16:46:49+00:00 |
| rhsa-2025:11802 | Red Hat Security Advisory: nodejs:22 security update | 2025-07-28T02:10:35+00:00 | 2026-01-22T16:46:49+00:00 |
| rhsa-2025:21829 | Red Hat Security Advisory: OpenShift Container Platform 4.12.83 bug fix and security update | 2025-11-27T12:20:57+00:00 | 2026-01-22T16:46:41+00:00 |
| rhsa-2025:21013 | Red Hat Security Advisory: libssh security update | 2025-11-11T19:29:32+00:00 | 2026-01-22T16:46:40+00:00 |
| rhsa-2025:19864 | Red Hat Security Advisory: OpenShift Container Platform 4.18.28 bug fix and security update | 2025-11-17T15:14:48+00:00 | 2026-01-22T16:46:40+00:00 |
| rhsa-2025:20943 | Red Hat Security Advisory: libssh security update | 2025-11-11T14:12:42+00:00 | 2026-01-22T16:46:38+00:00 |
| rhsa-2025:19807 | Red Hat Security Advisory: Red Hat OpenShift distributed tracing platform (Tempo) 3.7.1 release | 2025-11-05T14:26:13+00:00 | 2026-01-22T16:46:38+00:00 |
| rhsa-2025:19472 | Red Hat Security Advisory: libssh security update | 2025-11-03T12:20:18+00:00 | 2026-01-22T16:46:36+00:00 |
| rhsa-2025:19470 | Red Hat Security Advisory: libssh security update | 2025-11-03T12:14:23+00:00 | 2026-01-22T16:46:36+00:00 |
| rhsa-2025:19401 | Red Hat Security Advisory: libssh security update | 2025-11-03T01:40:22+00:00 | 2026-01-22T16:46:36+00:00 |
| rhsa-2025:19400 | Red Hat Security Advisory: libssh security update | 2025-11-03T01:22:57+00:00 | 2026-01-22T16:46:36+00:00 |
| rhsa-2025:19313 | Red Hat Security Advisory: OpenShift Container Platform 4.17.43 bug fix and security update | 2025-11-05T12:26:14+00:00 | 2026-01-22T16:46:34+00:00 |
| rhsa-2025:19300 | Red Hat Security Advisory: OpenShift Container Platform 4.19.18 bug fix and security update | 2025-11-05T18:15:06+00:00 | 2026-01-22T16:46:34+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| icsa-19-290-01 | AVEVA Vijeo Citect and Citect SCADA (Update A) | 2019-10-17T00:00:00.000000Z | 2019-12-19T00:00:00.000000Z |
| icsa-19-351-01 | GE S2020/S2020G Fast Switch 61850 | 2019-12-17T00:00:00.000000Z | 2019-12-17T00:00:00.000000Z |
| icsma-19-318-01 | Philips IntelliBridge EC40/80 (Update A) | 2019-11-14T00:00:00.000000Z | 2019-12-12T00:00:00.000000Z |
| icsa-19-346-03 | Omron PLC CJ, CS and NJ Series | 2019-12-12T00:00:00.000000Z | 2019-12-12T00:00:00.000000Z |
| icsa-19-346-02 | Omron PLC CJ and CS Series | 2019-12-12T00:00:00.000000Z | 2019-12-12T00:00:00.000000Z |
| icsa-19-346-01 | Advantech DiagAnywhere Server | 2019-12-12T00:00:00.000000Z | 2019-12-12T00:00:00.000000Z |
| icsa-19-106-03 | PLC Cycle Time Influences (Update A) | 2019-04-16T00:00:00.000000Z | 2019-12-12T00:00:00.000000Z |
| icsa-19-344-05 | Siemens XHQ Operations Intelligence | 2019-12-10T00:00:00.000000Z | 2019-12-10T00:00:00.000000Z |
| icsa-19-344-01 | Siemens SCALANCE W700 and W1700 | 2019-12-10T00:00:00.000000Z | 2019-12-10T00:00:00.000000Z |
| icsa-19-339-02 | Weidmueller Industrial Ethernet Switches | 2019-12-05T00:00:00.000000Z | 2019-12-05T00:00:00.000000Z |
| icsa-19-339-01 | Thales DIS SafeNet Sentinel LDK License Manager Runtime | 2019-12-05T00:00:00.000000Z | 2019-12-05T00:00:00.000000Z |
| icsa-19-337-02 | Moxa AWK-3121 | 2019-12-03T00:00:00.000000Z | 2019-12-03T00:00:00.000000Z |
| icsa-19-337-01 | Reliable Controls LicenseManager | 2019-12-03T00:00:00.000000Z | 2019-12-03T00:00:00.000000Z |
| icsa-19-330-02 | ABB Relion 650 and 670 Series | 2019-11-26T00:00:00.000000Z | 2019-11-26T00:00:00.000000Z |
| icsa-19-330-01 | ABB Relion 670 Series | 2019-11-26T00:00:00.000000Z | 2019-11-26T00:00:00.000000Z |
| icsa-19-323-01 | Flexera FlexNet Publisher | 2019-11-19T00:00:00.000000Z | 2019-11-19T00:00:00.000000Z |
| icsa-19-318-05 | ABB Power Generation Information Manager (PGIM) and Plant Connect | 2019-11-14T00:00:00.000000Z | 2019-11-14T00:00:00.000000Z |
| icsa-19-318-03 | Siemens Desigo PX Devices | 2019-11-12T00:00:00.000000Z | 2019-11-12T00:00:00.000000Z |
| icsma-19-311-02 | Medtronic Valleylab FT10 and FX8 | 2019-11-07T00:00:00.000000Z | 2019-11-07T00:00:00.000000Z |
| icsma-19-311-01 | Medtronic Valleylab FT10 and LS10 | 2019-11-07T00:00:00.000000Z | 2019-11-07T00:00:00.000000Z |
| icsma-19-120-01 | Philips Tasy EMR (Update A) | 2019-04-30T00:00:00.000000Z | 2019-11-07T00:00:00.000000Z |
| icsa-19-311-02 | Fuji Electric V-Server | 2019-11-07T00:00:00.000000Z | 2019-11-07T00:00:00.000000Z |
| icsa-19-311-01 | Mitsubishi Electric MELSEC-Q Series and MELSEC-L Series CPU Modules | 2019-11-07T00:00:00.000000Z | 2019-11-07T00:00:00.000000Z |
| icsa-19-309-01 | Omron CX-Supervisor | 2019-11-05T00:00:00.000000Z | 2019-11-05T00:00:00.000000Z |
| icsa-19-134-01 | Omron Network Configurator for DeviceNet (Update A) | 2019-05-14T00:00:00.000000Z | 2019-11-05T00:00:00.000000Z |
| icsa-19-304-04 | Honeywell equIP and Performance Series IP Cameras and Recorders | 2019-10-31T00:00:00.000000Z | 2019-10-31T00:00:00.000000Z |
| icsa-19-304-03 | Honeywell equIP and Performance Series IP Cameras | 2019-10-31T00:00:00.000000Z | 2019-10-31T00:00:00.000000Z |
| icsa-19-304-02 | Honeywell equIP Series IP Cameras | 2019-10-31T00:00:00.000000Z | 2019-10-31T00:00:00.000000Z |
| icsa-19-304-01 | Advantech WISE-PaaS/RMM | 2019-10-31T00:00:00.000000Z | 2019-10-31T00:00:00.000000Z |
| icsa-19-302-01 | PHOENIX CONTACT Automation Worx Software Suite | 2019-10-29T00:00:00.000000Z | 2019-10-29T00:00:00.000000Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| cisco-sa-20200226-fxos-ucs-cli-cmdinj | Cisco FXOS and UCS Manager Software Local Management CLI Command Injection Vulnerability | 2020-02-26T16:00:00+00:00 | 2020-03-06T16:42:36+00:00 |
| cisco-sa-20200226-fxos-ucs-cmdinj | Cisco FXOS and UCS Manager Software CLI Command Injection Vulnerability | 2020-02-26T16:00:00+00:00 | 2020-03-06T16:42:35+00:00 |
| cisco-sa-esa-resource-exhaust-d7rqahnd | Cisco Email Security Appliance Uncontrolled Resource Exhaustion Vulnerability | 2020-03-04T16:00:00+00:00 | 2020-03-05T15:50:15+00:00 |
| cisco-sa-esa-resource-exhaust-D7RQAhnD | Cisco Email Security Appliance Uncontrolled Resource Exhaustion Vulnerability | 2020-03-04T16:00:00+00:00 | 2020-03-05T15:50:15+00:00 |
| cisco-sa-webex-info-disc-ohqg982 | Cisco Webex Meetings Client for MacOS Information Disclosure Vulnerability | 2020-03-04T16:00:00+00:00 | 2020-03-04T16:00:00+00:00 |
| cisco-sa-webex-info-disc-OHqg982 | Cisco Webex Meetings Client for MacOS Information Disclosure Vulnerability | 2020-03-04T16:00:00+00:00 | 2020-03-04T16:00:00+00:00 |
| cisco-sa-tms-xss-4vxkdlo | Cisco TelePresence Management Suite Stored Cross-Site Scripting Vulnerability | 2020-03-04T16:00:00+00:00 | 2020-03-04T16:00:00+00:00 |
| cisco-sa-tms-xss-4VXKdLO | Cisco TelePresence Management Suite Stored Cross-Site Scripting Vulnerability | 2020-03-04T16:00:00+00:00 | 2020-03-04T16:00:00+00:00 |
| cisco-sa-rphy-cmdinject-dpejetgf | Cisco Remote PHY Device Software Command Injection Vulnerability | 2020-03-04T16:00:00+00:00 | 2020-03-04T16:00:00+00:00 |
| cisco-sa-rphy-cmdinject-DpEjeTgF | Cisco Remote PHY Device Software Command Injection Vulnerability | 2020-03-04T16:00:00+00:00 | 2020-03-04T16:00:00+00:00 |
| cisco-sa-prime-collab-xss-rjrce9n7 | Cisco Prime Collaboration Provisioning Cross-Site Scripting Vulnerability | 2020-03-04T16:00:00+00:00 | 2020-03-04T16:00:00+00:00 |
| cisco-sa-prime-collab-xss-RjRCe9n7 | Cisco Prime Collaboration Provisioning Cross-Site Scripting Vulnerability | 2020-03-04T16:00:00+00:00 | 2020-03-04T16:00:00+00:00 |
| cisco-sa-prim-collab-disclo-fanx4dkb | Cisco Prime Collaboration Provisioning Information Disclosure Vulnerability | 2020-03-04T16:00:00+00:00 | 2020-03-04T16:00:00+00:00 |
| cisco-sa-prim-collab-disclo-FAnX4DKB | Cisco Prime Collaboration Provisioning Information Disclosure Vulnerability | 2020-03-04T16:00:00+00:00 | 2020-03-04T16:00:00+00:00 |
| cisco-sa-ise-xss-br7nedjg | Cisco Identity Services Engine Cross-Site Scripting Vulnerability | 2020-03-04T16:00:00+00:00 | 2020-03-04T16:00:00+00:00 |
| cisco-sa-ise-xss-BR7nEDjG | Cisco Identity Services Engine Cross-Site Scripting Vulnerability | 2020-03-04T16:00:00+00:00 | 2020-03-04T16:00:00+00:00 |
| cisco-sa-iosxr-ipsec-dos-q8upx6m | Cisco IOS XR Software IPsec Packet Processor Denial of Service Vulnerability | 2020-03-04T16:00:00+00:00 | 2020-03-04T16:00:00+00:00 |
| cisco-sa-iosxr-ipsec-dos-q8UPX6m | Cisco IOS XR Software IPsec Packet Processor Denial of Service Vulnerability | 2020-03-04T16:00:00+00:00 | 2020-03-04T16:00:00+00:00 |
| cisco-sa-cpnr-csrf-wwtrdkyl | Cisco Prime Network Registrar Cross-Site Request Forgery Vulnerability | 2020-03-04T16:00:00+00:00 | 2020-03-04T16:00:00+00:00 |
| cisco-sa-cpnr-csrf-WWTrDkyL | Cisco Prime Network Registrar Cross-Site Request Forgery Vulnerability | 2020-03-04T16:00:00+00:00 | 2020-03-04T16:00:00+00:00 |
| cisco-sa-cont-sec-gui-dos-nj625dxb | Cisco ESA, Cisco WSA, and Cisco SMA GUI Denial of Service Vulnerability | 2020-03-04T16:00:00+00:00 | 2020-03-04T16:00:00+00:00 |
| cisco-sa-cont-sec-gui-dos-nJ625dXb | Cisco ESA, Cisco WSA, and Cisco SMA GUI Denial of Service Vulnerability | 2020-03-04T16:00:00+00:00 | 2020-03-04T16:00:00+00:00 |
| cisco-sa-20200304-webex-player | Cisco Webex Network Recording Player and Cisco Webex Player Arbitrary Code Execution Vulnerabilities | 2020-03-04T16:00:00+00:00 | 2020-03-04T16:00:00+00:00 |
| cisco-sa-20200226-ucs-cli-cmdinj | Cisco UCS Manager Software Local Management CLI Command Injection Vulnerability | 2020-02-26T16:00:00+00:00 | 2020-02-26T16:00:00+00:00 |
| cisco-sa-20200226-nxos-bgpmd5 | Cisco NX-OS Software Border Gateway Protocol MD5 Authentication Bypass Vulnerability | 2020-02-26T16:00:00+00:00 | 2020-02-26T16:00:00+00:00 |
| cisco-sa-20200226-nxos-arp | Cisco NX-OS Software Anycast Gateway Invalid ARP Vulnerability | 2020-02-26T16:00:00+00:00 | 2020-02-26T16:00:00+00:00 |
| cisco-sa-20200226-nxos-api-dos | Cisco NX-OS Software NX-API Denial of Service Vulnerability | 2020-02-26T16:00:00+00:00 | 2020-02-26T16:00:00+00:00 |
| cisco-sa-20200226-nexus-1000v-dos | Cisco Nexus 1000V Switch for VMware vSphere Secure Login Enhancements Denial of Service Vulnerability | 2020-02-26T16:00:00+00:00 | 2020-02-26T16:00:00+00:00 |
| cisco-sa-20200226-fpwr-cmdinj | Cisco FXOS Software CLI Command Injection Vulnerability | 2020-02-26T16:00:00+00:00 | 2020-02-26T16:00:00+00:00 |
| cisco-sa-20200205-voip-phones-rce-dos | Cisco IP Phone Remote Code Execution and Denial of Service Vulnerability | 2020-02-05T16:00:00+00:00 | 2020-02-25T13:47:32+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| msrc_cve-2024-56599 | wifi: ath10k: avoid NULL pointer error during sdio remove | 2024-12-02T00:00:00.000Z | 2025-09-03T20:49:34.000Z |
| msrc_cve-2024-53209 | bnxt_en: Fix receive ring space parameters when XDP is active | 2024-12-02T00:00:00.000Z | 2025-09-03T20:48:26.000Z |
| msrc_cve-2009-5063 | Memory leak in the embedded_profile_len function in pngwutil.c in libpng before 1.2.39beta5 allows context-dependent attackers to cause a denial of service (memory leak or segmentation fault) via a JPEG image containing an iCCP chunk with a negative embedded profile length. NOTE: this is due to an incomplete fix for CVE-2006-7244. | 2011-08-02T00:00:00.000Z | 2025-09-03T20:45:49.000Z |
| msrc_cve-2024-24789 | Mishandling of corrupt central directory record in archive/zip | 2024-06-02T07:00:00.000Z | 2025-09-03T20:45:41.000Z |
| msrc_cve-2021-47482 | net: batman-adv: fix error handling | 2024-05-02T07:00:00.000Z | 2025-09-03T20:44:16.000Z |
| msrc_cve-2020-10722 | A vulnerability was found in DPDK versions 18.05 and above. A missing check for an integer overflow in vhost_user_set_log_base() could result in a smaller memory map than requested, possibly allowing memory corruption. | 2020-05-02T00:00:00.000Z | 2025-09-03T20:43:23.000Z |
| msrc_cve-2024-53085 | tpm: Lock TPM chip in tpm_pm_suspend() first | 2024-11-02T00:00:00.000Z | 2025-09-03T20:42:04.000Z |
| msrc_cve-2024-26814 | vfio/fsl-mc: Block calling interrupt handler without trigger | 2024-04-02T07:00:00.000Z | 2025-09-03T20:41:52.000Z |
| msrc_cve-2022-48635 | fsdax: Fix infinite loop in dax_iomap_rw() | 2024-04-02T07:00:00.000Z | 2025-09-03T20:40:50.000Z |
| msrc_cve-2024-27437 | vfio/pci: Disable auto-enable of exclusive INTx IRQ | 2024-04-02T07:00:00.000Z | 2025-09-03T20:40:38.000Z |
| msrc_cve-2024-26811 | ksmbd: validate payload size in ipc response | 2024-04-02T07:00:00.000Z | 2025-09-03T20:38:05.000Z |
| msrc_cve-2024-47850 | CUPS cups-browsed before 2.5b1 will send an HTTP POST request to an arbitrary destination and port in response to a single IPP UDP packet requesting a printer to be added, a different vulnerability than CVE-2024-47176. (The request is meant to probe the new printer but can be used to create DDoS amplification attacks.) | 2024-10-01T07:00:00.000Z | 2025-09-03T20:34:03.000Z |
| msrc_cve-2021-33468 | An issue was discovered in yasm version 1.3.0. There is a use-after-free in error() in modules/preprocs/nasm/nasm-pp.c. | 2022-07-02T00:00:00.000Z | 2025-09-03T20:32:43.000Z |
| msrc_cve-2024-44337 | The package `github.com/gomarkdown/markdown` is a Go library for parsing Markdown text and rendering as HTML. Prior to pseudoversion `v0.0.0-20240729232818-a2a9c4f`, which corresponds with commit `a2a9c4f76ef5a5c32108e36f7c47f8d310322252`, there was a logical problem in the paragraph function of the parser/block.go file, which allowed a remote attacker to cause a denial of service (DoS) condition by providing a tailor-made input that caused an infinite loop, causing the program to hang and consume resources indefinitely. Submit `a2a9c4f76ef5a5c32108e36f7c47f8d310322252` contains fixes to this problem. | 2024-10-01T07:00:00.000Z | 2025-09-03T20:31:17.000Z |
| msrc_cve-2021-33467 | An issue was discovered in yasm version 1.3.0. There is a use-after-free in pp_getline() in modules/preprocs/nasm/nasm-pp.c. | 2022-07-02T00:00:00.000Z | 2025-09-03T20:31:09.000Z |
| msrc_cve-2021-33466 | An issue was discovered in yasm version 1.3.0. There is a NULL pointer dereference in expand_smacro() in modules/preprocs/nasm/nasm-pp.c. | 2022-07-02T00:00:00.000Z | 2025-09-03T20:29:53.000Z |
| msrc_cve-2024-42252 | closures: Change BUG_ON() to WARN_ON() | 2024-08-02T00:00:00.000Z | 2025-09-03T20:29:32.000Z |
| msrc_cve-2020-14378 | An integer underflow in dpdk versions before 18.11.10 and before 19.11.5 in the `move_desc` function can lead to large amounts of CPU cycles being eaten up in a long running loop. An attacker could cause `move_desc` to get stuck in a 4,294,967,295-count iteration loop. Depending on how `vhost_crypto` is being used this could prevent other VMs or network tasks from being serviced by the busy DPDK lcore for an extended period. | 2020-09-02T00:00:00.000Z | 2025-09-03T20:28:35.000Z |
| msrc_cve-2021-33465 | An issue was discovered in yasm version 1.3.0. There is a NULL pointer dereference in expand_mmacro() in modules/preprocs/nasm/nasm-pp.c. | 2022-07-02T00:00:00.000Z | 2025-09-03T20:28:27.000Z |
| msrc_cve-2024-43857 | f2fs: fix null reference error when checking end of zone | 2024-08-02T00:00:00.000Z | 2025-09-03T20:28:26.000Z |
| msrc_cve-2024-49917 | drm/amd/display: Add NULL check for clk_mgr and clk_mgr->funcs in dcn30_init_hw | 2024-10-01T07:00:00.000Z | 2025-09-03T20:27:18.000Z |
| msrc_cve-2012-0883 | envvars (aka envvars-std) in the Apache HTTP Server before 2.4.2 places a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse DSO in the current working directory during execution of apachectl. | 2012-04-02T00:00:00.000Z | 2025-09-03T20:26:28.000Z |
| msrc_cve-2019-20633 | GNU patch through 2.7.6 contains a free(p_line[p_end]) Double Free vulnerability in the function another_hunk in pch.c that can cause a denial of service via a crafted patch file. NOTE: this issue exists because of an incomplete fix for CVE-2018-6952. | 2020-03-02T00:00:00.000Z | 2025-09-03T20:26:16.000Z |
| msrc_cve-2010-4226 | cpio, as used in build 2007.05.10, 2010.07.28, and possibly other versions, allows remote attackers to overwrite arbitrary files via a symlink within an RPM package archive. | 2014-02-02T00:00:00.000Z | 2025-09-03T20:26:05.000Z |
| msrc_cve-2024-50014 | ext4: fix access to uninitialised lock in fc replay path | 2024-10-01T07:00:00.000Z | 2025-09-03T20:23:54.000Z |
| msrc_cve-2021-33462 | An issue was discovered in yasm version 1.3.0. There is a use-after-free in expr_traverse_nodes_post() in libyasm/expr.c. | 2022-07-02T00:00:00.000Z | 2025-09-03T20:23:46.000Z |
| msrc_cve-2019-14249 | dwarf_elf_load_headers.c in libdwarf before 2019-07-05 allows attackers to cause a denial of service | 2019-07-02T00:00:00.000Z | 2025-09-03T20:23:20.000Z |
| msrc_cve-2024-43849 | soc: qcom: pdr: protect locator_addr with the main mutex | 2024-08-02T00:00:00.000Z | 2025-09-03T20:22:56.000Z |
| msrc_cve-2020-28163 | libdwarf before 20201201 allows a dwarf_print_lines.c NULL pointer dereference and application crash via a DWARF5 line-table header that has an invalid FORM for a pathname. | 2023-04-01T00:00:00.000Z | 2025-09-03T20:22:17.000Z |
| msrc_cve-2021-33461 | An issue was discovered in yasm version 1.3.0. There is a use-after-free in yasm_intnum_destroy() in libyasm/intnum.c. | 2022-07-02T00:00:00.000Z | 2025-09-03T20:22:11.000Z |
| ID | Description | Updated |
|---|---|---|
| var-202201-0631 | An Improper Certificate Validation weakness in the Juniper Networks Junos OS allows an at… | 2024-02-13T22:54:06.364000Z |
| var-202112-0645 | There is a memory leak vulnerability in CloudEngine 12800 V200R019C00SPC800, CloudEngine … | 2024-02-13T22:54:06.492000Z |
| var-202202-0278 | There is a directory traversal vulnerability in some home gateway products of ZTE. Due to… | 2024-02-13T22:54:05.976000Z |
| var-201006-0378 | Multiple directory traversal vulnerabilities in the web server for Motorola SURFBoard cab… | 2024-02-13T22:52:46.001000Z |
| var-201201-0118 | CRLF injection vulnerability in Cogent DataHub 7.1.2 and earlier, Cascade DataHub 6.4.20 … | 2024-02-13T22:52:43.037000Z |
| var-201602-0067 | The SSH implementation in Cisco StarOS before 19.3.M0.62771 and 20.x before 20.0.M0.62768… | 2024-02-13T22:52:40.745000Z |
| var-201704-0139 | Sierra Wireless GX 440 devices with ALEOS firmware 4.3.2 do not require authentication fo… | 2024-02-13T22:52:39.916000Z |
| var-201905-0605 | A vulnerability in the HostScan component of Cisco AnyConnect Secure Mobility Client for … | 2024-02-13T22:52:37.461000Z |
| var-202202-1182 | A stack-based buffer overflow vulnerability exists in the NBNS functionality of Sealevel … | 2024-02-13T22:52:00.182000Z |
| var-202202-1181 | A stack-based buffer overflow vulnerability exists in both the LLMNR functionality of Sea… | 2024-02-13T22:52:00.152000Z |
| var-202202-0589 | Exposure of sensitive information to an unauthorized actor vulnerability in Web Server in… | 2024-02-13T22:52:00.344000Z |
| var-202202-0295 | A CWE-400: Uncontrolled Resource Consumption vulnerability exists that could cause a deni… | 2024-02-13T22:52:00.409000Z |
| var-202203-0870 | A vulnerability in the RADIUS feature of Cisco Identity Services Engine (ISE) could allow… | 2024-02-13T22:51:59.816000Z |
| var-201505-0179 | Multiple cross-site scripting (XSS) vulnerabilities on the Cisco Email Security Appliance… | 2024-02-13T22:51:45.046000Z |
| var-201504-0285 | Open redirect vulnerability in Cisco FireSIGHT System Software 5.3.1.1, 5.3.1.2, and 6.0.… | 2024-02-13T22:51:45.105000Z |
| var-201604-0105 | The Web User Interface (WebUI) in FortiOS 5.0.x before 5.0.13, 5.2.x before 5.2.3, and 5.… | 2024-02-13T22:51:42.099000Z |
| var-201602-0121 | Directory traversal vulnerability in the GetFileList function in the SAP Manufacturing In… | 2024-02-13T22:51:42.166000Z |
| var-201809-0073 | An information disclosure vulnerability exists in the Multi-Camera interface used by the … | 2024-02-13T22:51:36.550000Z |
| var-202001-1848 | A vulnerability has been identified in Capital Embedded AR Classic 431-422 (All versions)… | 2024-02-13T22:51:34.656000Z |
| var-202101-1387 | A local privilege escalation vulnerability in telnetd.real of Juniper Networks Junos OS m… | 2024-02-13T22:51:33.528000Z |
| var-202012-0731 | In BIG-IP APM versions 16.0.0-16.0.0.1, 15.1.0-15.1.0.4, 15.0.0-15.0.1.3, 14.1.0-14.1.3, … | 2024-02-13T22:51:33.717000Z |
| var-202201-1947 | On BIG-IP version 16.x before 16.1.0, 15.1.x before 15.1.4.1, 14.1.x before 14.1.4.5, and… | 2024-02-13T22:51:32.178000Z |
| var-202201-1319 | On BIG-IP versions 16.x before 16.1.0, 15.1.x before 15.1.4.1, 14.1.x before 14.1.4.4, an… | 2024-02-13T22:51:32.354000Z |
| var-202201-0626 | An Improper Validation of Specified Quantity in Input vulnerability in the routing protoc… | 2024-02-13T22:51:32.494000Z |
| var-202203-1938 | There is a stored XSS vulnerability in ZTE home gateway product. An attacker could modify… | 2024-02-13T22:51:31.040000Z |
| var-202203-1363 | An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in… | 2024-02-13T22:51:31.151000Z |
| var-202203-1362 | A memory initialization issue was addressed with improved memory handling. This issue is … | 2024-02-13T22:51:31.115000Z |
| var-202203-0540 | BigAnt Software BigAnt Server v5.6.06 was discovered to contain a Cross-Site Request Forg… | 2024-02-13T22:51:31.682000Z |
| var-202202-1048 | A vulnerability in the web-based management interface of Cisco Prime Infrastructure and C… | 2024-02-13T22:51:31.928000Z |
| var-202204-1265 | An unauthenticated, remote attacker can disrupt existing communication channels between C… | 2024-02-13T22:51:30.883000Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| jvndb-2006-000619 | MyWeb SQL injection vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2006-000617 | Multiple email clients vulnerable to directory traversal due to inappropriate unicode handling | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2006-000616 | DonutP and UnDonut confirmation dialog display vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2006-000615 | Apache Struts Validator allows to bypass input data validation | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2006-000614 | Winny buffer overflow vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2006-000613 | Trac cross-site scripting vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2006-000612 | FreeStyleWiki cross-site scripting vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2006-000611 | QUICK CART cross-site scripting vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2006-000610 | QUICK CART OS command injection vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2006-000609 | CAFEMILK Shopping Cart CGI cross-site scripting vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2006-000606 | Minnu's filer2 vulnerable in allowing arbitrary Ruby script execution | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2006-000605 | Hyper NIKKI System allows unauthorized email submission | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2006-000604 | Nagasaki Electronic Prefectural Office System SQL injection vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2006-000603 | Hatena Toolbar sends URL information unecnrypted | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2006-000602 | Multiple email clients vulnerable in handling an attachement inapropriately | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2006-000601 | Eudora Japanese version stops working after the application crashes | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2006-000600 | Nagasaki Electronic Prefectural Office System authentication information vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2006-000599 | Nagasaki Electronic Prefectural Office System vulnerable to bypass authentication | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2006-000540 | Microsoft Windows Indexing Service cross-site scripting vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2006-000392 | Ruby contains a vulnerability that prevents safe level 4 from functioning as a sandbox. | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2006-000345 | Microsoft Internet Explorer address bar spoofing vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2006-000326 | Mozilla Firefox vulnerable to HTTP response splitting | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2006-000293 | Sun Java System Web Server cross-site scripting vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2006-000251 | SquirrelMail cross-site scripting vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2005-000864 | XOOPS cross-site scripting vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2005-000805 | nProtect Netizen has multiple vulnerabilities | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2005-000802 | BBSNote cross-site scripting vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2005-000801 | WebNote Clip vulnerable to OS command injection | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2005-000800 | Opera bookmark function vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2005-000799 | Problem with referer header handling on mobile phone web browsers | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| suse-su-2025:0426-1 | Security update for the Linux Kernel RT (Live Patch 2 for SLE 15 SP6) | 2025-02-11T10:33:30Z | 2025-02-11T10:33:30Z |
| suse-su-2025:0425-1 | Security update for wget | 2025-02-11T10:33:15Z | 2025-02-11T10:33:15Z |
| suse-su-2025:0424-1 | Security update for python3-numpy | 2025-02-11T10:31:12Z | 2025-02-11T10:31:12Z |
| suse-su-2025:0421-1 | Security update for ovmf | 2025-02-11T10:28:25Z | 2025-02-11T10:28:25Z |
| suse-su-2025:0420-1 | Security update for skopeo | 2025-02-11T10:27:20Z | 2025-02-11T10:27:20Z |
| suse-su-2025:0419-1 | Security update for python311 | 2025-02-11T10:25:44Z | 2025-02-11T10:25:44Z |
| suse-su-2025:0414-1 | Security update for the Linux Kernel (Live Patch 62 for SLE 12 SP5) | 2025-02-11T03:33:33Z | 2025-02-11T03:33:33Z |
| suse-su-2025:20123-1 | Security update for cloud-regionsrv-client | 2025-02-10T21:48:06Z | 2025-02-10T21:48:06Z |
| suse-su-2025:0410-1 | Security update for the Linux Kernel RT (Live Patch 0 for SLE 15 SP6) | 2025-02-10T21:02:43Z | 2025-02-10T21:02:43Z |
| suse-su-2025:0407-1 | Security update for ovmf | 2025-02-10T13:56:35Z | 2025-02-10T13:56:35Z |
| suse-su-2025:0406-1 | Security update for python310 | 2025-02-10T13:55:48Z | 2025-02-10T13:55:48Z |
| suse-su-2025:0405-1 | Security update for MozillaThunderbird | 2025-02-10T13:54:51Z | 2025-02-10T13:54:51Z |
| suse-su-2025:0404-1 | Security update for rsync | 2025-02-10T11:49:50Z | 2025-02-10T11:49:50Z |
| suse-su-2025:0401-1 | Security update for crypto-policies, krb5 | 2025-02-10T09:38:29Z | 2025-02-10T09:38:29Z |
| suse-su-2025:0394-1 | Security update for tomcat | 2025-02-10T07:34:42Z | 2025-02-10T07:34:42Z |
| suse-su-2025:0393-1 | Security update for go1.23 | 2025-02-10T07:34:30Z | 2025-02-10T07:34:30Z |
| suse-su-2025:0392-1 | Security update for go1.22 | 2025-02-10T07:34:18Z | 2025-02-10T07:34:18Z |
| suse-su-2025:0391-1 | Security update for MozillaFirefox | 2025-02-10T07:34:04Z | 2025-02-10T07:34:04Z |
| suse-su-2025:0390-1 | Security update for openssl-1_1 | 2025-02-10T07:33:48Z | 2025-02-10T07:33:48Z |
| suse-su-2025:0389-1 | Security update for bind | 2025-02-10T07:33:38Z | 2025-02-10T07:33:38Z |
| suse-su-2025:0388-1 | Security update for openssl-3 | 2025-02-07T17:18:44Z | 2025-02-07T17:18:44Z |
| suse-su-2025:0387-1 | Security update for openssl-3 | 2025-02-07T17:16:21Z | 2025-02-07T17:16:21Z |
| suse-su-2025:0386-1 | Security update for python39 | 2025-02-07T17:13:32Z | 2025-02-07T17:13:32Z |
| suse-su-2025:0384-1 | Security update for bind | 2025-02-07T13:00:40Z | 2025-02-07T13:00:40Z |
| suse-su-2025:20223-1 | Security update for rsync | 2025-02-07T09:56:49Z | 2025-02-07T09:56:49Z |
| suse-su-2025:0382-1 | Security update for podman | 2025-02-07T08:44:01Z | 2025-02-07T08:44:01Z |
| suse-su-2025:0380-1 | Security update for wget | 2025-02-06T14:44:25Z | 2025-02-06T14:44:25Z |
| suse-su-2025:0377-1 | Security update for google-osconfig-agent | 2025-02-05T19:31:13Z | 2025-02-05T19:31:13Z |
| suse-su-2025:0374-1 | Security update for MozillaFirefox | 2025-02-05T15:38:17Z | 2025-02-05T15:38:17Z |
| suse-su-2025:0372-1 | Security update for curl | 2025-02-05T15:36:16Z | 2025-02-05T15:36:16Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| opensuse-su-2024:13052-1 | libcjose-devel-0.6.2.2-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13051-1 | libredwg-devel-0.12.5.5907-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13050-1 | krb5-1.21.1-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13049-1 | python312-3.12.0b4-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13048-1 | MozillaFirefox-115.0.2-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13047-1 | redis-7.0.12-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13046-1 | go1.19-1.19.11-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13045-1 | libspice-server-devel-0.15.2-2.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13044-1 | python310-Django-4.2.3-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13043-1 | kitty-0.29.0-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13042-1 | kernel-devel-6.4.2-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13041-1 | python310-pipreqs-0.4.13-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13040-1 | MozillaThunderbird-102.13.0-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13039-1 | matrix-synapse-1.85.2-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13038-1 | python311-3.11.4-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13037-1 | MozillaFirefox-115.0-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13036-1 | ghostscript-9.56.1-4.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13035-1 | squashfs-4.6.1-2.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13034-1 | perl-HTTP-Tiny-0.086-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13033-1 | python39-3.9.17-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13032-1 | python312-3.12.0b3-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13031-1 | python310-3.10.12-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13030-1 | ImageMagick-7.1.1.12-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13029-1 | python38-3.8.17-1.2 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13028-1 | librabbitmq-devel-0.13.0-2.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13027-1 | grafana-10.0.1-2.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13026-1 | chromedriver-114.0.5735.198-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13025-1 | libmozjs-102-0-102.12.0-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13024-1 | libhogweed6-3.9.1-2.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13023-1 | gifsicle-1.94-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| cnvd-2025-22695 | Curfew e-Pass Management System /admin/search-pass.php文件SQL注入漏洞 | 2025-03-19 | 2025-09-26 |
| cnvd-2025-22694 | Curfew e-Pass Management System pass-bwdates-report.php文件SQL注入漏洞 | 2025-05-07 | 2025-09-26 |
| cnvd-2025-22693 | Curfew e-Pass Management System /admin/pass-bwdates-reports-details.php文件SQL注入漏洞 | 2025-05-13 | 2025-09-26 |
| cnvd-2025-22692 | Curfew e-Pass Management System /admin/edit-pass-detail.php文件SQL注入漏洞 | 2025-05-14 | 2025-09-26 |
| cnvd-2025-22691 | Curfew e-Pass Management System /index.php文件SQL注入漏洞 | 2025-06-11 | 2025-09-26 |
| cnvd-2025-22690 | Curfew e-Pass Management System /admin/view-pass-detail.php文件SQL注入漏洞 | 2025-06-11 | 2025-09-26 |
| cnvd-2025-22689 | Curfew e-Pass Management System /admin/edit-category-detail.php文件SQL注入漏洞 | 2025-06-11 | 2025-09-26 |
| cnvd-2025-22688 | 多款Apple产品拒绝服务漏洞（CNVD-2025-22688） | 2025-09-18 | 2025-09-26 |
| cnvd-2025-22687 | 多款Apple产品存在未明漏洞（CNVD-2025-22687） | 2025-09-18 | 2025-09-26 |
| cnvd-2025-22686 | 多款Apple产品越界读取漏洞（CNVD-2025-22686） | 2025-09-18 | 2025-09-26 |
| cnvd-2025-22685 | 多款Apple产品存在未明漏洞（CNVD-2025-22685） | 2025-09-18 | 2025-09-26 |
| cnvd-2025-22684 | 多款Apple产品存在未明漏洞（CNVD-2025-22684） | 2025-09-18 | 2025-09-26 |
| cnvd-2025-22683 | 多款Apple产品存在未明漏洞（CNVD-2025-22683） | 2025-09-18 | 2025-09-26 |
| cnvd-2025-22682 | 多款Apple产品存在未明漏洞（CNVD-2025-22682） | 2025-09-18 | 2025-09-26 |
| cnvd-2025-22681 | 多款Apple产品存在未明漏洞（CNVD-2025-22681） | 2025-09-18 | 2025-09-26 |
| cnvd-2025-22680 | 多款Apple产品存在未明漏洞（CNVD-2025-22680） | 2025-09-18 | 2025-09-26 |
| cnvd-2025-22679 | 多款Apple产品拒绝服务漏洞（CNVD-2025-22679） | 2025-09-18 | 2025-09-26 |
| cnvd-2025-22678 | 多款Apple产品存在未明漏洞（CNVD-2025-22678） | 2025-09-18 | 2025-09-26 |
| cnvd-2025-22677 | 多款Apple产品存在未明漏洞（CNVD-2025-22677） | 2025-09-18 | 2025-09-26 |
| cnvd-2025-22676 | 多款Apple产品信息泄露漏洞（CNVD-2025-22676） | 2025-09-18 | 2025-09-26 |
| cnvd-2025-22675 | 多款Apple产品拒绝服务漏洞（CNVD-2025-22675） | 2025-09-18 | 2025-09-26 |
| cnvd-2025-22674 | 多款Apple产品存在未明漏洞（CNVD-2025-22674） | 2025-09-18 | 2025-09-26 |
| cnvd-2025-22673 | 多款Apple产品存在未明漏洞（CNVD-2025-22673） | 2025-09-18 | 2025-09-26 |
| cnvd-2025-22672 | Complaint Management System /admin/category.php文件SQL注入漏洞 | 2024-12-30 | 2025-09-26 |
| cnvd-2025-22671 | Complaint Management System /admin/state.php文件SQL注入漏洞 | 2024-12-30 | 2025-09-26 |
| cnvd-2025-22670 | Complaint Management System /admin/admin-profile.php文件SQL注入漏洞 | 2025-05-22 | 2025-09-26 |
| cnvd-2025-22669 | Complaint Management System /user/register-complaint.ph文件SQL注入漏洞 | 2025-06-11 | 2025-09-26 |
| cnvd-2025-22668 | Complaint Management System /user/profile.php文件SQL注入漏洞 | 2025-06-11 | 2025-09-26 |
| cnvd-2025-22667 | Complaint Management System /admin/updatecomplaint.php文件SQL注入漏洞 | 2025-06-11 | 2025-09-26 |
| cnvd-2025-22666 | WordPress插件Advance Portfolio Grid跨站脚本漏洞 | 2025-09-25 | 2025-09-26 |
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2024-avi-0801 | Multiples vulnérabilités dans les produits ESET | 2024-09-23T00:00:00.000000 | 2024-09-23T00:00:00.000000 |
| CERTFR-2024-AVI-0802 | Multiples vulnérabilités dans les produits Moxa | 2024-09-23T00:00:00.000000 | 2024-09-23T00:00:00.000000 |
| CERTFR-2024-AVI-0801 | Multiples vulnérabilités dans les produits ESET | 2024-09-23T00:00:00.000000 | 2024-09-23T00:00:00.000000 |
| certfr-2024-avi-0800 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2024-09-20T00:00:00.000000 | 2024-09-20T00:00:00.000000 |
| certfr-2024-avi-0799 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2024-09-20T00:00:00.000000 | 2024-09-20T00:00:00.000000 |
| certfr-2024-avi-0798 | Multiples vulnérabilités dans le noyau Linux de Red Hat | 2024-09-20T00:00:00.000000 | 2024-09-20T00:00:00.000000 |
| certfr-2024-avi-0797 | Multiples vulnérabilités dans les produits IBM | 2024-09-20T00:00:00.000000 | 2024-09-20T00:00:00.000000 |
| certfr-2024-avi-0796 | Vulnérabilité dans Ivanti Cloud Services Appliance | 2024-09-20T00:00:00.000000 | 2024-09-20T00:00:00.000000 |
| certfr-2024-avi-0795 | Vulnérabilité dans les produits Microsoft | 2024-09-20T00:00:00.000000 | 2024-09-20T00:00:00.000000 |
| certfr-2024-avi-0794 | Vulnérabilité dans Microsoft Office | 2024-09-20T00:00:00.000000 | 2024-09-20T00:00:00.000000 |
| certfr-2024-avi-0793 | Multiples vulnérabilités dans Microsoft Edge | 2024-09-20T00:00:00.000000 | 2024-09-20T00:00:00.000000 |
| certfr-2024-avi-0784 | Vulnérabilité dans Ivanti Cloud Service Appliance | 2024-09-17T00:00:00.000000 | 2024-09-20T00:00:00.000000 |
| CERTFR-2024-AVI-0800 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2024-09-20T00:00:00.000000 | 2024-09-20T00:00:00.000000 |
| CERTFR-2024-AVI-0799 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2024-09-20T00:00:00.000000 | 2024-09-20T00:00:00.000000 |
| CERTFR-2024-AVI-0798 | Multiples vulnérabilités dans le noyau Linux de Red Hat | 2024-09-20T00:00:00.000000 | 2024-09-20T00:00:00.000000 |
| CERTFR-2024-AVI-0797 | Multiples vulnérabilités dans les produits IBM | 2024-09-20T00:00:00.000000 | 2024-09-20T00:00:00.000000 |
| CERTFR-2024-AVI-0796 | Vulnérabilité dans Ivanti Cloud Services Appliance | 2024-09-20T00:00:00.000000 | 2024-09-20T00:00:00.000000 |
| CERTFR-2024-AVI-0795 | Vulnérabilité dans les produits Microsoft | 2024-09-20T00:00:00.000000 | 2024-09-20T00:00:00.000000 |
| CERTFR-2024-AVI-0794 | Vulnérabilité dans Microsoft Office | 2024-09-20T00:00:00.000000 | 2024-09-20T00:00:00.000000 |
| CERTFR-2024-AVI-0793 | Multiples vulnérabilités dans Microsoft Edge | 2024-09-20T00:00:00.000000 | 2024-09-20T00:00:00.000000 |
| CERTFR-2024-AVI-0784 | Vulnérabilité dans Ivanti Cloud Service Appliance | 2024-09-17T00:00:00.000000 | 2024-09-20T00:00:00.000000 |
| certfr-2024-avi-0791 | Vulnérabilité dans GitLab | 2024-09-18T00:00:00.000000 | 2024-09-18T00:00:00.000000 |
| certfr-2024-avi-0790 | Multiples vulnérabilités dans Google Chrome | 2024-09-18T00:00:00.000000 | 2024-09-18T00:00:00.000000 |
| certfr-2024-avi-0789 | Vulnérabilité dans Mozilla Firefox pour Android | 2024-09-18T00:00:00.000000 | 2024-09-18T00:00:00.000000 |
| certfr-2024-avi-0788 | Multiples vulnérabilités dans les produits Atlassian | 2024-09-18T00:00:00.000000 | 2024-09-18T00:00:00.000000 |
| certfr-2024-avi-0787 | Vulnérabilité dans LibreOffice | 2024-09-18T00:00:00.000000 | 2024-09-18T00:00:00.000000 |
| certfr-2024-avi-0786 | Multiples vulnérabilités dans les produits HPE Aruba Networking | 2024-09-18T00:00:00.000000 | 2024-09-18T00:00:00.000000 |
| CERTFR-2024-AVI-0791 | Vulnérabilité dans GitLab | 2024-09-18T00:00:00.000000 | 2024-09-18T00:00:00.000000 |
| CERTFR-2024-AVI-0790 | Multiples vulnérabilités dans Google Chrome | 2024-09-18T00:00:00.000000 | 2024-09-18T00:00:00.000000 |
| CERTFR-2024-AVI-0789 | Vulnérabilité dans Mozilla Firefox pour Android | 2024-09-18T00:00:00.000000 | 2024-09-18T00:00:00.000000 |