Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2025-64213 |
7.5 (3.1)
|
WordPress MasterStudy LMS Pro plugin < 4.7.16 - Sensit… |
StylemixThemes |
MasterStudy LMS Pro |
2025-12-18T07:22:11.993Z | 2026-01-20T14:28:19.977Z |
| CVE-2025-64212 |
5.4 (3.1)
|
WordPress MasterStudy LMS Pro plugin < 4.7.16 - Broken… |
StylemixThemes |
MasterStudy LMS Pro |
2025-10-29T08:38:08.827Z | 2026-01-20T14:28:19.958Z |
| CVE-2025-64209 |
7.5 (3.1)
|
WordPress Masterstudy theme < 4.8.122 - Broken Access … |
StylemixThemes |
Masterstudy |
2025-12-18T07:22:11.805Z | 2026-01-20T14:28:19.877Z |
| CVE-2025-64206 |
9.8 (3.1)
|
WordPress Jannah theme <= 7.6.0 - PHP Object Injection… |
TieLabs |
Jannah |
2025-12-18T07:22:11.440Z | 2026-01-20T14:28:19.907Z |
| CVE-2025-64202 |
6.5 (3.1)
|
WordPress Sahifa theme < 5.8.6 - Cross Site Scripting … |
TieLabs |
Sahifa |
2025-10-29T08:38:06.577Z | 2026-01-20T14:28:19.577Z |
| CVE-2025-64201 |
4.3 (3.1)
|
WordPress PowerPress Podcasting plugin <= 11.13.12 - C… |
blubrry |
PowerPress Podcasting |
2025-10-29T08:38:06.132Z | 2026-01-20T14:28:19.584Z |
| CVE-2025-64200 |
5.9 (3.1)
|
WordPress Email Template Customizer for WooCommerce pl… |
VillaTheme |
Email Template Customizer for WooCommerce |
2025-10-29T08:38:05.654Z | 2026-01-20T14:28:19.586Z |
| CVE-2025-64199 |
5.3 (3.1)
|
WordPress wpresidence theme <= 5.3.2 - Broken Access C… |
WpEstate |
wpresidence |
2025-10-29T08:38:05.202Z | 2026-01-20T14:28:19.491Z |
| CVE-2025-64198 |
7.1 (3.1)
|
WordPress Easy Social Share Buttons plugin < 10.7.1 - … |
appscreo |
Easy Social Share Buttons |
2025-11-06T15:56:09.273Z | 2026-01-20T14:28:19.492Z |
| CVE-2025-64197 |
6.5 (3.1)
|
WordPress Rehub theme < 19.9.9.1 - Cross Site Scriptin… |
sizam |
Rehub |
2025-10-29T08:38:04.636Z | 2026-01-20T14:28:19.456Z |
| CVE-2025-64196 |
7.1 (3.1)
|
WordPress Booster for WooCommerce plugin <= 7.2.5 - Cr… |
Pluggabl |
Booster for WooCommerce |
2025-11-06T15:56:07.302Z | 2026-01-20T14:28:19.411Z |
| CVE-2025-64195 |
7.5 (3.1)
|
WordPress Eduma theme <= 5.7.6 - Local File Inclusion … |
ThimPress |
Eduma |
2025-10-29T08:38:04.034Z | 2026-01-20T14:28:19.495Z |
| CVE-2025-64194 |
6.5 (3.1)
|
WordPress Eduma theme <= 5.7.6 - Cross Site Scripting … |
ThimPress |
Eduma |
2025-10-29T08:38:03.614Z | 2026-01-20T14:28:19.461Z |
| CVE-2025-64193 |
7.5 (3.1)
|
WordPress XStore theme < 9.6.1 - Local File Inclusion … |
8theme |
XStore |
2025-12-18T07:22:10.879Z | 2026-01-20T14:28:19.452Z |
| CVE-2025-64192 |
6.3 (3.1)
|
WordPress XStore theme < 9.6 - Broken Access Control v… |
8theme |
XStore |
2025-12-18T07:22:10.694Z | 2026-01-20T14:28:19.406Z |
| CVE-2025-64191 |
7.1 (3.1)
|
WordPress XStore theme < 9.6.1 - Cross Site Scripting … |
8theme |
XStore |
2025-12-18T07:22:10.489Z | 2026-01-20T14:28:19.459Z |
| CVE-2025-64190 |
6.5 (3.1)
|
WordPress XStore Core plugin < 5.6 - Cross Site Script… |
8theme.com |
XStore Core |
2025-12-30T16:00:52.385Z | 2026-01-20T14:28:19.393Z |
| CVE-2025-64189 |
7.1 (3.1)
|
WordPress XStore Core plugin < 5.6 - Cross Site Script… |
8theme |
XStore Core |
2025-12-18T07:22:10.319Z | 2026-01-20T14:28:19.422Z |
| CVE-2025-64188 |
9.8 (3.1)
|
WordPress Soledad theme <= 8.6.9 - Privilege Escalatio… |
PenciDesign |
Soledad |
2025-12-18T07:22:10.139Z | 2026-01-20T14:28:19.407Z |
| CVE-2025-6327 |
10 (3.1)
|
WordPress King Addons for Elementor plugin <= 51.1.36 … |
KingAddons.com |
King Addons for Elementor |
2025-11-06T15:56:06.826Z | 2026-01-20T14:28:19.457Z |
| CVE-2025-6326 |
8.1 (3.1)
|
WordPress Inset theme <= 1.18.0 - Local File Inclusion… |
AncoraThemes |
Inset |
2025-12-18T07:22:09.950Z | 2026-01-20T14:28:19.461Z |
| CVE-2025-6325 |
9.8 (3.1)
|
WordPress King Addons for Elementor plugin <= 51.1.36 … |
KingAddons.com |
King Addons for Elementor |
2025-11-06T15:56:05.901Z | 2026-01-20T14:28:19.494Z |
| CVE-2025-6324 |
7.1 (3.1)
|
WordPress Easy Invoice plugin <= 2.0.9 - Cross Site Sc… |
MatrixAddons |
Easy Invoice |
2025-12-18T07:22:09.770Z | 2026-01-20T14:28:19.479Z |
| CVE-2025-63077 |
4.3 (3.1)
|
WordPress Happy Addons for Elementor plugin <= 3.20.2 … |
HappyMonster |
Happy Addons for Elementor |
2025-12-09T14:52:37.020Z | 2026-01-20T14:28:19.453Z |
| CVE-2025-63076 |
7.5 (3.1)
|
WordPress The7 Elements plugin <= 2.7.11 - Local File … |
Dream-Theme |
The7 Elements |
2025-12-09T14:52:36.814Z | 2026-01-20T14:28:19.421Z |
| CVE-2025-63075 |
6.5 (3.1)
|
WordPress Betheme theme <= 28.1.7 - Cross Site Scripti… |
muffingroup |
Betheme |
2025-12-09T14:52:36.619Z | 2026-01-20T14:28:19.327Z |
| CVE-2025-63074 |
7.5 (3.1)
|
WordPress The7 theme <= 12.8.0.2 - Local File Inclusio… |
Dream-Theme |
The7 |
2025-12-09T14:52:36.427Z | 2026-01-20T14:28:19.331Z |
| CVE-2025-63073 |
6.5 (3.1)
|
WordPress The7 theme <= 12.8.0.2 - Cross Site Scriptin… |
Dream-Theme |
The7 |
2025-12-09T14:52:36.226Z | 2026-01-20T14:28:19.385Z |
| CVE-2025-63072 |
6.5 (3.1)
|
WordPress Cornerstone plugin <= 7.7.3 - Cross Site Scr… |
THEMECO |
Cornerstone |
2025-12-09T14:52:35.972Z | 2026-01-20T14:28:19.385Z |
| CVE-2025-63071 |
5.3 (3.1)
|
WordPress Shortcodes and extra features for Phlox them… |
averta |
Shortcodes and extra features for Phlox theme |
2025-12-09T14:52:35.783Z | 2026-01-20T14:28:19.257Z |
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2025-39352 |
8.2 (3.1)
|
WordPress Grand Restaurant WordPress theme <= 7.0 - Ar… |
ThemeGoods |
Grand Restaurant WordPress |
2025-05-19T19:49:17.818Z | 2025-05-19T21:19:40.246Z |
| CVE-2025-67281 |
5.4 (3.1)
|
In TIM BPM Suite/ TIM FLOW through 9.1.2 multiple… |
n/a |
n/a |
2026-01-09T00:00:00.000Z | 2026-01-09T16:12:30.357Z |
| CVE-2025-67280 |
5.4 (3.1)
|
In TIM BPM Suite/ TIM FLOW through 9.1.2 multiple… |
n/a |
n/a |
2026-01-09T00:00:00.000Z | 2026-01-09T16:14:06.098Z |
| CVE-2025-67279 |
5.3 (3.1)
|
An issue in TIM Solution GmbH TIM BPM Suite & TIM… |
n/a |
n/a |
2026-01-09T00:00:00.000Z | 2026-01-09T16:18:38.474Z |
| CVE-2025-67282 |
5.4 (3.1)
|
In TIM BPM Suite/ TIM FLOW through 9.1.2 multiple… |
n/a |
n/a |
2026-01-09T00:00:00.000Z | 2026-01-09T16:10:18.983Z |
| CVE-2025-67922 |
6.1 (3.1)
|
WordPress Grand Restaurant theme < 7.0.9 - Cross Site … |
ThemeGoods |
Grand Restaurant |
2026-01-08T09:17:47.190Z | 2026-01-20T14:28:26.420Z |
| CVE-2025-39351 |
4.3 (3.1)
|
WordPress Grand Restaurant WordPress theme <= 7.0 - Cr… |
ThemeGoods |
Grand Restaurant WordPress |
2025-05-19T16:30:03.073Z | 2025-05-19T16:58:12.779Z |
| CVE-2025-67278 |
6.5 (3.1)
|
An issue in TIM Solution GmbH TIM BPM Suite & TIM… |
n/a |
n/a |
2026-01-09T00:00:00.000Z | 2026-01-09T16:19:40.921Z |
| CVE-2025-47777 |
9.7 (3.1)
|
5ire Client Vulnerable to Cross-Site Scripting (XSS) a… |
nanbingxyz |
5ire |
2025-05-14T15:23:28.565Z | 2025-05-14T15:39:38.173Z |
| CVE-2024-39532 |
6.3 (3.1)
|
Junos OS and Junos OS Evolved: Confidential informatio… |
Juniper Networks |
Junos OS |
2024-07-11T16:06:40.305Z | 2025-01-07T20:25:28.188Z |
| CVE-2020-36922 |
6.9 (4.0)
7.5 (3.1)
|
Sony BRAVIA Digital Signage 1.7.8 Unauthenticated Syst… |
Pro-Bravia |
Sony BRAVIA Digital Signage |
2026-01-06T15:52:27.136Z | 2026-01-06T18:24:00.626Z |
| CVE-2024-39531 |
7.5 (3.1)
8.7 (4.0)
|
Junos OS Evolved: ACX 7000 Series: Protocol specific D… |
Juniper Networks |
Junos OS Evolved |
2024-07-11T16:04:46.412Z | 2024-08-02T04:26:15.878Z |
| CVE-2024-39565 |
8.8 (3.1)
7.7 (4.0)
|
Junos OS: J-Web: An unauthenticated, network-based att… |
Juniper Networks, Inc. |
Junos OS |
2024-07-10T22:55:27.516Z | 2024-08-02T04:26:15.990Z |
| CVE-2026-22036 |
5.9 (3.1)
|
Undici has an unbounded decompression chain in HTTP re… |
nodejs |
undici |
2026-01-14T19:07:13.745Z | 2026-01-22T20:17:20.208Z |
| CVE-2025-11561 |
8.8 (3.1)
|
Sssd: sssd default kerberos configuration allows privi… |
|
|
2025-10-09T13:37:53.089Z | 2026-01-22T20:19:07.138Z |
| CVE-2021-47760 |
N/A
|
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority as a duplicate. | N/A | N/A | 2026-01-15T15:52:06.479Z | 2026-01-22T20:42:51.435Z |
| CVE-2020-36923 |
6.9 (4.0)
9.8 (3.1)
|
Sony BRAVIA Digital Signage 1.7.8 Client-Side Protecti… |
Sony Electronics Inc. |
Sony BRAVIA Digital Signage |
2026-01-06T15:52:27.572Z | 2026-01-06T18:56:11.847Z |
| CVE-2024-39536 |
5.3 (3.1)
6 (4.0)
|
Junos OS and Junos OS Evolved: Flaps of BFD sessions w… |
Juniper Networks |
Junos OS |
2024-07-11T16:13:24.485Z | 2024-08-02T04:26:15.613Z |
| CVE-2025-13781 |
6.5 (3.1)
|
Missing Authorization in GitLab |
GitLab |
GitLab |
2026-01-09T10:03:51.554Z | 2026-01-09T19:14:05.513Z |
| CVE-2024-39535 |
6.5 (3.1)
7.1 (4.0)
|
Junos OS Evolved: ACX 7000 Series: When specific traff… |
Juniper Networks |
Junos OS Evolved |
2024-07-11T16:09:15.233Z | 2024-08-02T04:26:15.853Z |
| CVE-2024-39533 |
5.8 (3.1)
6.9 (4.0)
|
Junos OS: QFX5000 Series and EX4600 Series: Output fir… |
Juniper Networks |
Junos OS |
2024-07-11T16:08:29.431Z | 2024-08-02T04:26:15.170Z |
| CVE-2025-67397 |
9.1 (3.1)
|
An issue in Passy v.1.6.3 allows a remote authent… |
n/a |
n/a |
2026-01-05T00:00:00.000Z | 2026-01-06T19:24:29.981Z |
| CVE-2023-36331 |
8.2 (3.1)
|
Incorrect access control in the /member/orderList… |
n/a |
n/a |
2026-01-12T00:00:00.000Z | 2026-01-12T20:12:16.471Z |
| CVE-2025-0359 |
8.5 (3.1)
|
During an annual penetration test conducted on be… |
Axis Communications AB |
AXIS OS |
2025-03-04T05:21:34.944Z | 2025-03-28T07:03:53.756Z |
| CVE-2025-0360 |
7.8 (3.1)
|
During an annual penetration test conducted on be… |
Axis Communications AB |
AXIS OS |
2025-03-04T05:24:00.720Z | 2025-03-26T12:09:06.856Z |
| CVE-2025-40942 |
8.8 (3.1)
7.3 (4.0)
|
A vulnerability has been identified in TeleContro… |
Siemens |
TeleControl Server Basic |
2026-01-13T09:44:04.669Z | 2026-01-13T17:36:00.499Z |
| CVE-2026-0822 |
5.3 (4.0)
6.3 (3.1)
6.3 (3.0)
|
quickjs-ng quickjs quickjs.c js_typed_array_sort heap-… |
quickjs-ng |
quickjs |
2026-01-10T13:32:08.881Z | 2026-01-12T18:30:50.158Z |
| CVE-2025-21973 |
N/A
|
eth: bnxt: fix kernel panic in the bnxt_get_queue_stat… |
Linux |
Linux |
2025-04-01T15:47:05.506Z | 2025-05-04T07:26:16.483Z |
| CVE-2025-21950 |
N/A
|
drivers: virt: acrn: hsm: Use kzalloc to avoid info le… |
Linux |
Linux |
2025-04-01T15:41:10.949Z | 2025-11-03T19:39:51.532Z |
| CVE-2023-53024 |
N/A
|
bpf: Fix pointer-leak due to insufficient speculative … |
Linux |
Linux |
2025-03-27T16:43:49.824Z | 2025-05-04T12:50:06.221Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| fkie_cve-2025-39352 | Missing Authorization vulnerability in ThemeGoods Grand Restaurant WordPress allows Exploiting Inco… | 2025-05-19T20:15:23.197 | 2026-01-22T21:36:26.930 |
| fkie_cve-2025-67281 | In TIM BPM Suite/ TIM FLOW through 9.1.2 multiple SQL injection vulnerabilities exists which allow … | 2026-01-09T16:16:07.513 | 2026-01-22T21:35:21.023 |
| fkie_cve-2025-67280 | In TIM BPM Suite/ TIM FLOW through 9.1.2 multiple Hibernate Query Language injection vulnerabilitie… | 2026-01-09T16:16:07.397 | 2026-01-22T21:33:32.567 |
| fkie_cve-2025-67279 | An issue in TIM Solution GmbH TIM BPM Suite & TIM FLOW before v.9.1.2 allows a remote attacker to e… | 2026-01-09T16:16:07.287 | 2026-01-22T21:32:59.817 |
| fkie_cve-2025-67282 | In TIM BPM Suite/ TIM FLOW through 9.1.2 multiple Authorization Bypass vulnerabilities exists which… | 2026-01-09T16:16:07.623 | 2026-01-22T21:32:26.063 |
| fkie_cve-2025-67922 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2026-01-08T10:15:51.220 | 2026-01-22T21:31:57.440 |
| fkie_cve-2025-39351 | Cross-Site Request Forgery (CSRF) vulnerability in ThemeGoods Grand Restaurant WordPress allows Cro… | 2025-05-19T17:15:24.763 | 2026-01-22T21:31:10.567 |
| fkie_cve-2025-67278 | An issue in TIM Solution GmbH TIM BPM Suite & TIM FLOW before v.9.1.2 allows a remote attacker to e… | 2026-01-09T16:16:07.163 | 2026-01-22T21:29:32.033 |
| fkie_cve-2025-47777 | 5ire is a cross-platform desktop artificial intelligence assistant and model context protocol clien… | 2025-05-14T16:15:28.957 | 2026-01-22T21:26:26.727 |
| fkie_cve-2024-39532 | An Insertion of Sensitive Information into Log File vulnerability in Juniper Networks Junos OS and … | 2024-07-11T17:15:10.403 | 2026-01-22T21:20:43.407 |
| fkie_cve-2020-36922 | Sony BRAVIA Digital Signage 1.7.8 contains an information disclosure vulnerability that allows unau… | 2026-01-06T16:15:48.597 | 2026-01-22T21:20:37.917 |
| fkie_cve-2024-39531 | An Improper Handling of Values vulnerability in the Packet Forwarding Engine (PFE) of Juniper Netwo… | 2024-07-11T17:15:10.150 | 2026-01-22T21:20:15.240 |
| fkie_cve-2024-39565 | An Improper Neutralization of Data within XPath Expressions ('XPath Injection') vulnerability in J-… | 2024-07-10T23:15:13.940 | 2026-01-22T21:19:49.190 |
| fkie_cve-2026-22036 | Undici is an HTTP/1.1 client for Node.js. Prior to 7.18.0 and 6.23.0, the number of links in the de… | 2026-01-14T19:16:47.833 | 2026-01-22T21:15:50.070 |
| fkie_cve-2025-11561 | A flaw was found in the integration of Active Directory and the System Security Services Daemon (SS… | 2025-10-09T14:15:54.447 | 2026-01-22T21:15:49.040 |
| fkie_cve-2021-47760 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority as a dup… | 2026-01-15T16:16:06.993 | 2026-01-22T21:15:48.850 |
| fkie_cve-2020-36923 | Sony BRAVIA Digital Signage 1.7.8 contains an insecure direct object reference vulnerability that a… | 2026-01-06T16:15:48.780 | 2026-01-22T21:15:17.330 |
| fkie_cve-2024-39536 | A Missing Release of Memory after Effective Lifetime vulnerability in the Periodic Packet Managemen… | 2024-07-11T17:15:11.190 | 2026-01-22T21:13:29.153 |
| fkie_cve-2025-13781 | GitLab has remediated an issue in GitLab EE affecting all versions from 18.5 before 18.5.5, 18.6 be… | 2026-01-09T10:15:45.613 | 2026-01-22T21:13:15.820 |
| fkie_cve-2024-39535 | An Improper Check for Unusual or Exceptional Conditions vulnerability in the Packet Forwarding Engi… | 2024-07-11T17:15:10.900 | 2026-01-22T21:13:07.270 |
| fkie_cve-2024-39533 | An Unimplemented or Unsupported Feature in the UI vulnerability in Juniper Networks Junos OS on QFX… | 2024-07-11T17:15:10.650 | 2026-01-22T21:12:28.650 |
| fkie_cve-2025-67397 | An issue in Passy v.1.6.3 allows a remote authenticated attacker to execute arbitrary commands via … | 2026-01-05T19:15:56.750 | 2026-01-22T21:12:00.927 |
| fkie_cve-2023-36331 | Incorrect access control in the /member/orderList API of xmall v1.1 allows attackers to arbitrarily… | 2026-01-12T20:15:52.523 | 2026-01-22T21:09:43.433 |
| fkie_cve-2025-0359 | During an annual penetration test conducted on behalf of Axis Communication, Truesec discovered a f… | 2025-03-04T06:15:30.023 | 2026-01-22T21:01:59.243 |
| fkie_cve-2025-0360 | During an annual penetration test conducted on behalf of Axis Communication, Truesec discovered a f… | 2025-03-04T06:15:30.180 | 2026-01-22T20:59:43.883 |
| fkie_cve-2025-40942 | A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.4). Affected… | 2026-01-13T10:15:58.283 | 2026-01-22T20:58:54.670 |
| fkie_cve-2026-0822 | A vulnerability was identified in quickjs-ng quickjs up to 0.11.0. This issue affects the function … | 2026-01-10T14:15:50.087 | 2026-01-22T20:58:16.307 |
| fkie_cve-2025-21973 | In the Linux kernel, the following vulnerability has been resolved: eth: bnxt: fix kernel panic in… | 2025-04-01T16:15:28.637 | 2026-01-22T20:57:38.830 |
| fkie_cve-2025-21950 | In the Linux kernel, the following vulnerability has been resolved: drivers: virt: acrn: hsm: Use … | 2025-04-01T16:15:26.180 | 2026-01-22T20:57:23.540 |
| fkie_cve-2023-53024 | In the Linux kernel, the following vulnerability has been resolved: bpf: Fix pointer-leak due to i… | 2025-03-27T17:15:51.980 | 2026-01-22T20:56:59.773 |
| ID | Severity | Description | Published | Updated |
|---|---|---|---|---|
| ghsa-w55g-72pj-g2vm |
6.5 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-12-01T18:30:38Z | 2026-01-20T15:31:57Z |
| ghsa-rf55-6qxf-873f |
5.3 (3.1)
|
Missing Authorization vulnerability in theme funda Show Variations as Single Products Woocommerce w… | 2025-11-21T15:31:28Z | 2026-01-20T15:31:57Z |
| ghsa-m7gj-j4fq-3x93 |
5.3 (3.1)
|
Missing Authorization vulnerability in bPlugins Tiktok Feed b-tiktok-feed allows Exploiting Incorre… | 2025-11-21T15:31:27Z | 2026-01-20T15:31:57Z |
| ghsa-j89p-93xp-xgv5 |
6.1 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-11-21T15:31:28Z | 2026-01-20T15:31:57Z |
| ghsa-gjfp-qmj4-p9mv |
4.3 (3.1)
|
Missing Authorization vulnerability in WebToffee Accessibility Toolkit by WebYes accessibility-plus… | 2025-11-21T15:31:28Z | 2026-01-20T15:31:57Z |
| ghsa-6697-8cc9-pq2x |
5.4 (3.1)
|
Missing Authorization vulnerability in ThemeAtelier Better Chat Support for Messenger better-chat-s… | 2025-11-21T15:31:28Z | 2026-01-20T15:31:57Z |
| ghsa-3qpq-4m92-9c3w |
6.6 (3.1)
|
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… | 2025-11-21T15:31:28Z | 2026-01-20T15:31:57Z |
| ghsa-3cxp-vv37-hxmm |
5.3 (3.1)
|
Missing Authorization vulnerability in octolize Cart Weight for WooCommerce woo-cart-weight allows … | 2025-11-21T15:31:28Z | 2026-01-20T15:31:57Z |
| ghsa-xrf2-cmw5-8q98 |
4.3 (3.1)
|
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability … | 2025-11-21T15:31:27Z | 2026-01-20T15:31:56Z |
| ghsa-x83m-pwr6-93c3 |
4.3 (3.1)
|
Missing Authorization vulnerability in Stiofan UsersWP userswp allows Exploiting Incorrectly Config… | 2025-11-21T15:31:26Z | 2026-01-20T15:31:56Z |
| ghsa-x62h-x4vq-47q9 |
5.3 (3.1)
|
Cross-Site Request Forgery (CSRF) vulnerability in Syed Balkhi Giveaways and Contests by RafflePres… | 2025-11-21T15:31:26Z | 2026-01-20T15:31:56Z |
| ghsa-whwj-99fj-jwg3 |
4.3 (3.1)
|
Missing Authorization vulnerability in magepeopleteam WpEvently mage-eventpress allows Exploiting I… | 2025-11-21T15:31:27Z | 2026-01-20T15:31:56Z |
| ghsa-w59g-xprj-7jw4 |
5.3 (3.1)
|
Missing Authorization vulnerability in Property Hive PropertyHive propertyhive allows Exploiting In… | 2025-11-21T15:31:27Z | 2026-01-20T15:31:56Z |
| ghsa-w57g-6g26-8m7v |
4.3 (3.1)
|
Missing Authorization vulnerability in Themeisle PPOM for WooCommerce woocommerce-product-addon all… | 2025-11-21T15:31:26Z | 2026-01-20T15:31:56Z |
| ghsa-rmpq-8rrx-v2xv |
5.3 (3.1)
|
Missing Authorization vulnerability in Jegstudio Gutenverse gutenverse allows Exploiting Incorrectl… | 2025-11-21T15:31:26Z | 2026-01-20T15:31:56Z |
| ghsa-r6w9-xw9v-7737 |
4.3 (3.1)
|
Missing Authorization vulnerability in Jegstudio Gutenverse Form gutenverse-form allows Exploiting … | 2025-11-21T15:31:26Z | 2026-01-20T15:31:56Z |
| ghsa-q7wv-x8q8-p7r5 |
4.3 (3.1)
|
Missing Authorization vulnerability in tychesoftwares Custom Order Numbers for WooCommerce custom-o… | 2025-11-21T15:31:26Z | 2026-01-20T15:31:56Z |
| ghsa-q3xg-fpwh-277q |
4.3 (3.1)
|
Cross-Site Request Forgery (CSRF) vulnerability in Igor Jerosimić I Order Terms i-order-terms allow… | 2025-11-21T15:31:27Z | 2026-01-20T15:31:56Z |
| ghsa-pvvx-8727-hxpg |
5.3 (3.1)
|
Missing Authorization vulnerability in Cozy Vision SMS Alert Order Notifications sms-alert allows E… | 2025-11-21T15:31:27Z | 2026-01-20T15:31:56Z |
| ghsa-ph4f-5qx9-mmf8 |
6.5 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-11-21T15:31:27Z | 2026-01-20T15:31:56Z |
| ghsa-pchg-4wrm-9vgc |
4.3 (3.1)
|
Missing Authorization vulnerability in WebToffee Product Feed for WooCommerce webtoffee-product-fee… | 2025-11-21T15:31:27Z | 2026-01-20T15:31:56Z |
| ghsa-mc2f-6pf4-67j7 |
3.7 (3.1)
|
URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Frank Goossens WP YouTube Lyte… | 2025-11-21T15:31:26Z | 2026-01-20T15:31:56Z |
| ghsa-m989-x9wm-g6p2 |
4.3 (3.1)
|
Missing Authorization vulnerability in WebToffee Order Export & Order Import for WooCommerce order-… | 2025-11-13T12:31:42Z | 2026-01-20T15:31:56Z |
| ghsa-jw6h-h7r6-gcp8 |
6.5 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-11-21T15:31:27Z | 2026-01-20T15:31:56Z |
| ghsa-jpcx-8gp4-xh25 |
4.3 (3.1)
|
Missing Authorization vulnerability in Shahjahan Jewel FluentCommunity fluent-community allows Expl… | 2025-11-21T15:31:27Z | 2026-01-20T15:31:56Z |
| ghsa-jc9r-j5j5-r5w9 |
4.3 (3.1)
|
Cross-Site Request Forgery (CSRF) vulnerability in Craig Hewitt Seriously Simple Podcasting serious… | 2025-11-21T15:31:26Z | 2026-01-20T15:31:56Z |
| ghsa-hvj5-hw3p-69rg |
4.3 (3.1)
|
Missing Authorization vulnerability in Essential Plugin Featured Post Creative featured-post-creati… | 2025-11-21T15:31:27Z | 2026-01-20T15:31:56Z |
| ghsa-h63r-3947-2f58 |
5.4 (3.1)
|
Missing Authorization vulnerability in jgwhite33 WP Google Review Slider wp-google-places-review-sl… | 2025-11-21T15:31:26Z | 2026-01-20T15:31:56Z |
| ghsa-gv8g-jhvc-8p4r |
5.3 (3.1)
|
Missing Authorization vulnerability in Craig Hewitt Seriously Simple Podcasting seriously-simple-po… | 2025-11-21T15:31:26Z | 2026-01-20T15:31:56Z |
| ghsa-gjc9-grw9-5m5q |
6.5 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-11-13T12:31:42Z | 2026-01-20T15:31:56Z |
| ID | Description | Updated |
|---|---|---|
| gsd-2024-21848 | Improper Access Control in Mattermost Server versions 8.1.x before 8.1.11 allows an attac… | 2024-04-04T05:02:25.506160Z |
| gsd-2021-47207 | In the Linux kernel, the following vulnerability has been resolved: ALSA: gus: fix null … | 2024-04-03T05:03:55.045972Z |
| gsd-2021-47203 | In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Fix list… | 2024-04-03T05:03:55.049867Z |
| gsd-2021-47201 | In the Linux kernel, the following vulnerability has been resolved: iavf: free q_vectors… | 2024-04-03T05:03:55.020856Z |
| gsd-2021-47200 | In the Linux kernel, the following vulnerability has been resolved: drm/prime: Fix use a… | 2024-04-03T05:03:55.046856Z |
| gsd-2021-47196 | In the Linux kernel, the following vulnerability has been resolved: RDMA/core: Set send … | 2024-04-03T05:03:55.030164Z |
| gsd-2021-47191 | In the Linux kernel, the following vulnerability has been resolved: scsi: scsi_debug: Fi… | 2024-04-03T05:03:55.048211Z |
| gsd-2021-47186 | In the Linux kernel, the following vulnerability has been resolved: tipc: check for null… | 2024-04-03T05:03:55.020642Z |
| gsd-2021-47183 | In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Fix link… | 2024-04-03T05:03:55.044779Z |
| gsd-2021-47181 | In the Linux kernel, the following vulnerability has been resolved: usb: musb: tusb6010:… | 2024-04-03T05:03:55.034755Z |
| gsd-2021-47179 | In the Linux kernel, the following vulnerability has been resolved: NFSv4: Fix a NULL po… | 2024-04-03T05:03:55.006617Z |
| gsd-2021-47178 | In the Linux kernel, the following vulnerability has been resolved: scsi: target: core: … | 2024-04-03T05:03:55.045343Z |
| gsd-2021-47174 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_set_p… | 2024-04-03T05:03:55.024611Z |
| gsd-2021-47173 | In the Linux kernel, the following vulnerability has been resolved: misc/uss720: fix mem… | 2024-04-03T05:03:55.004555Z |
| gsd-2021-47172 | In the Linux kernel, the following vulnerability has been resolved: iio: adc: ad7124: Fi… | 2024-04-03T05:03:55.047628Z |
| gsd-2021-47170 | In the Linux kernel, the following vulnerability has been resolved: USB: usbfs: Don't WA… | 2024-04-03T05:03:55.000850Z |
| gsd-2021-47161 | In the Linux kernel, the following vulnerability has been resolved: spi: spi-fsl-dspi: F… | 2024-04-03T05:03:55.039382Z |
| gsd-2021-47206 | In the Linux kernel, the following vulnerability has been resolved: usb: host: ohci-tmio… | 2024-04-03T05:03:54.959677Z |
| gsd-2021-47205 | In the Linux kernel, the following vulnerability has been resolved: clk: sunxi-ng: Unreg… | 2024-04-03T05:03:54.978333Z |
| gsd-2021-47204 | In the Linux kernel, the following vulnerability has been resolved: net: dpaa2-eth: fix … | 2024-04-03T05:03:54.916908Z |
| gsd-2021-47202 | In the Linux kernel, the following vulnerability has been resolved: thermal: Fix NULL po… | 2024-04-03T05:03:54.993791Z |
| gsd-2021-47199 | In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: CT, Fix m… | 2024-04-03T05:03:54.924578Z |
| gsd-2021-47198 | In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Fix use-… | 2024-04-03T05:03:54.956494Z |
| gsd-2021-47197 | In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: nullify c… | 2024-04-03T05:03:54.940886Z |
| gsd-2021-47195 | In the Linux kernel, the following vulnerability has been resolved: spi: fix use-after-f… | 2024-04-03T05:03:54.912656Z |
| gsd-2021-47194 | In the Linux kernel, the following vulnerability has been resolved: cfg80211: call cfg80… | 2024-04-03T05:03:54.966894Z |
| gsd-2021-47193 | In the Linux kernel, the following vulnerability has been resolved: scsi: pm80xx: Fix me… | 2024-04-03T05:03:54.964756Z |
| gsd-2021-47192 | In the Linux kernel, the following vulnerability has been resolved: scsi: core: sysfs: F… | 2024-04-03T05:03:54.943368Z |
| gsd-2021-47190 | In the Linux kernel, the following vulnerability has been resolved: perf bpf: Avoid memo… | 2024-04-03T05:03:54.936733Z |
| gsd-2021-47189 | In the Linux kernel, the following vulnerability has been resolved: btrfs: fix memory or… | 2024-04-03T05:03:54.959890Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| MAL-2025-192675 | Malicious code in xnetgpt-lite (npm) | 2025-12-19T16:20:59Z | 2025-12-22T21:38:15Z |
| MAL-2025-192674 | Malicious code in xnetgpt (npm) | 2025-12-19T16:20:59Z | 2025-12-22T21:38:15Z |
| MAL-2025-192673 | Malicious code in xmlwtf3 (npm) | 2025-12-19T16:17:02Z | 2025-12-22T21:38:15Z |
| MAL-2025-192578 | Malicious code in xboxlive-auth (npm) | 2025-12-15T07:43:52Z | 2025-12-22T21:38:15Z |
| mal-2025-192672 | Malicious code in wifi-killer-xnet (npm) | 2025-12-19T16:20:59Z | 2025-12-22T21:38:14Z |
| mal-2025-192655 | Malicious code in viktorparserctf9 (npm) | 2025-12-19T08:40:34Z | 2025-12-22T21:38:14Z |
| mal-2025-192654 | Malicious code in viktorparserctf8 (npm) | 2025-12-19T08:40:34Z | 2025-12-22T21:38:14Z |
| mal-2025-192653 | Malicious code in viktorparserctf7 (npm) | 2025-12-19T08:40:34Z | 2025-12-22T21:38:14Z |
| mal-2025-192652 | Malicious code in viktorparserctf6 (npm) | 2025-12-19T08:40:34Z | 2025-12-22T21:38:14Z |
| mal-2025-192651 | Malicious code in viktorparserctf5 (npm) | 2025-12-19T08:40:34Z | 2025-12-22T21:38:14Z |
| mal-2025-192650 | Malicious code in viktorparserctf4 (npm) | 2025-12-19T08:40:34Z | 2025-12-22T21:38:14Z |
| mal-2025-192649 | Malicious code in viktorparserctf3 (npm) | 2025-12-19T08:40:34Z | 2025-12-22T21:38:14Z |
| mal-2025-192648 | Malicious code in viktorparserctf2 (npm) | 2025-12-19T08:40:34Z | 2025-12-22T21:38:14Z |
| mal-2025-192647 | Malicious code in viktorparserctf (npm) | 2025-12-19T08:40:34Z | 2025-12-22T21:38:14Z |
| mal-2025-192646 | Malicious code in viktor-xml-parser (npm) | 2025-12-19T08:40:34Z | 2025-12-22T21:38:14Z |
| mal-2025-192644 | Malicious code in usage-tracker-janus (npm) | 2025-12-19T08:36:04Z | 2025-12-22T21:38:14Z |
| mal-2025-192643 | Malicious code in test-mal-npm-pkg (npm) | 2025-12-19T08:39:59Z | 2025-12-22T21:38:14Z |
| mal-2025-192642 | Malicious code in tailwind-logic (npm) | 2025-12-19T08:32:28Z | 2025-12-22T21:38:14Z |
| mal-2025-192641 | Malicious code in tailwind-color-shine (npm) | 2025-12-19T08:32:28Z | 2025-12-22T21:38:14Z |
| mal-2025-192640 | Malicious code in tailwind-animationbased (npm) | 2025-12-19T08:32:28Z | 2025-12-22T21:38:14Z |
| mal-2025-192615 | Malicious code in tnactgfds (npm) | 2025-12-19T08:23:46Z | 2025-12-22T21:38:14Z |
| mal-2025-192604 | Malicious code in xbox-bottomnav (npm) | 2025-12-17T13:15:52Z | 2025-12-22T21:38:14Z |
| mal-2025-192600 | Malicious code in tailwind-variables (npm) | 2025-12-16T07:27:00Z | 2025-12-22T21:38:14Z |
| mal-2025-192599 | Malicious code in tailwind-stylecss (npm) | 2025-12-16T07:27:00Z | 2025-12-22T21:38:14Z |
| mal-2025-192596 | Malicious code in starling-api (npm) | 2025-12-16T07:03:48Z | 2025-12-22T21:38:14Z |
| mal-2025-192567 | Malicious code in uba-plugins (npm) | 2025-12-12T06:34:06Z | 2025-12-22T21:38:14Z |
| MAL-2025-192672 | Malicious code in wifi-killer-xnet (npm) | 2025-12-19T16:20:59Z | 2025-12-22T21:38:14Z |
| MAL-2025-192655 | Malicious code in viktorparserctf9 (npm) | 2025-12-19T08:40:34Z | 2025-12-22T21:38:14Z |
| MAL-2025-192654 | Malicious code in viktorparserctf8 (npm) | 2025-12-19T08:40:34Z | 2025-12-22T21:38:14Z |
| MAL-2025-192653 | Malicious code in viktorparserctf7 (npm) | 2025-12-19T08:40:34Z | 2025-12-22T21:38:14Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| wid-sec-w-2024-3510 | M-Files Server: Mehrere Schwachstellem | 2024-11-19T23:00:00.000+00:00 | 2024-11-19T23:00:00.000+00:00 |
| wid-sec-w-2024-3508 | Atlassian Confluence: Mehrere Schwachstellen | 2024-11-19T23:00:00.000+00:00 | 2024-11-19T23:00:00.000+00:00 |
| wid-sec-w-2024-3507 | Atlassian Jira Software: Mehrere Schwachstellen | 2024-11-19T23:00:00.000+00:00 | 2024-11-19T23:00:00.000+00:00 |
| wid-sec-w-2024-3506 | Arista EOS: Mehrere Schwachstellen ermöglichen Denial of Service | 2024-11-19T23:00:00.000+00:00 | 2024-11-19T23:00:00.000+00:00 |
| wid-sec-w-2024-3505 | lxml: Schwachstelle ermöglicht Cross-Site Scripting | 2024-11-19T23:00:00.000+00:00 | 2024-11-19T23:00:00.000+00:00 |
| wid-sec-w-2024-3504 | Rancher: Schwachstelle ermöglicht Offenlegung von Informationen | 2024-11-19T23:00:00.000+00:00 | 2024-11-19T23:00:00.000+00:00 |
| wid-sec-w-2024-3503 | Apple Safari, iOS, iPadOS, macOS: Mehrere Schwachstellen | 2024-11-19T23:00:00.000+00:00 | 2024-11-19T23:00:00.000+00:00 |
| wid-sec-w-2024-3501 | Veritas Enterprise Vault: Mehrere Schwachstellen ermöglichen Cross-Site Scripting | 2024-11-19T23:00:00.000+00:00 | 2024-11-19T23:00:00.000+00:00 |
| wid-sec-w-2024-3500 | IBM FileNet Content Manager: Schwachstelle ermöglicht nicht spezifizierten Angriff | 2024-11-19T23:00:00.000+00:00 | 2024-11-19T23:00:00.000+00:00 |
| wid-sec-w-2024-3485 | Apache Camel for Spring Boot: Mehrere Schwachstellen | 2024-11-17T23:00:00.000+00:00 | 2024-11-19T23:00:00.000+00:00 |
| wid-sec-w-2024-3452 | Microsoft DeveloperTools: Mehrere Schwachstellen | 2024-11-12T23:00:00.000+00:00 | 2024-11-19T23:00:00.000+00:00 |
| wid-sec-w-2024-3336 | Red Hat Enterprise Linux (OpenEXR): Schwachstelle ermöglicht Manipulation von Dateien | 2024-11-04T23:00:00.000+00:00 | 2024-11-19T23:00:00.000+00:00 |
| wid-sec-w-2024-3331 | Veritas NetBackup: Schwachstelle ermöglicht Privilegieneskalation | 2024-11-04T23:00:00.000+00:00 | 2024-11-19T23:00:00.000+00:00 |
| wid-sec-w-2024-3286 | Red Hat Enterprise Linux: Mehrere Schwachstellen | 2024-10-27T23:00:00.000+00:00 | 2024-11-19T23:00:00.000+00:00 |
| wid-sec-w-2024-0949 | Red Hat Satellite: Mehrere Schwachstellen | 2024-04-23T22:00:00.000+00:00 | 2024-11-19T23:00:00.000+00:00 |
| wid-sec-w-2024-0180 | Squid: Schwachstelle ermöglicht Denial of Service | 2024-01-23T23:00:00.000+00:00 | 2024-11-19T23:00:00.000+00:00 |
| wid-sec-w-2023-2630 | Google Chrome und Microsoft Edge: Mehrere Schwachstellen | 2023-10-10T22:00:00.000+00:00 | 2024-11-19T23:00:00.000+00:00 |
| wid-sec-w-2024-3492 | Oracle Supply Chain / Agile PLM Framework: Schwachstelle ermöglicht Offenlegung von Informationen | 2024-11-18T23:00:00.000+00:00 | 2024-11-18T23:00:00.000+00:00 |
| wid-sec-w-2024-3490 | SUSE Manager: Mehrere Schwachstellen ermöglichen Cross-Site Scripting | 2024-11-18T23:00:00.000+00:00 | 2024-11-18T23:00:00.000+00:00 |
| wid-sec-w-2024-3489 | Trend Micro Deep Security Agent: Schwachstelle ermöglicht Privilegieneskalation | 2024-11-18T23:00:00.000+00:00 | 2024-11-18T23:00:00.000+00:00 |
| wid-sec-w-2024-2175 | VMware vCenter Server: Mehrere Schwachstellen ermöglichen Codeausführung und Privilegienerweiterung | 2024-09-17T22:00:00.000+00:00 | 2024-11-18T23:00:00.000+00:00 |
| wid-sec-w-2024-0761 | Octopus Deploy: Schwachstelle ermöglicht Privilegieneskalation | 2024-04-01T22:00:00.000+00:00 | 2024-11-18T23:00:00.000+00:00 |
| wid-sec-w-2024-0755 | IBM WebSphere Application Server: Schwachstelle ermöglicht Offenlegung von Informationen | 2024-04-01T22:00:00.000+00:00 | 2024-11-18T23:00:00.000+00:00 |
| wid-sec-w-2024-0753 | IBM Business Automation Workflow: Mehrere Schwachstellen | 2024-04-01T22:00:00.000+00:00 | 2024-11-18T23:00:00.000+00:00 |
| wid-sec-w-2024-0750 | IBM Business Automation Workflow: Schwachstelle ermöglicht Offenlegung von Informationen | 2024-04-01T22:00:00.000+00:00 | 2024-11-18T23:00:00.000+00:00 |
| wid-sec-w-2024-0743 | Cisco IOS: Schwachstelle ermöglicht Denial of Service | 2024-03-27T23:00:00.000+00:00 | 2024-11-18T23:00:00.000+00:00 |
| wid-sec-w-2024-0740 | Cisco IOS: Mehrere Schwachstellen ermöglichen Denial of Service | 2024-03-27T23:00:00.000+00:00 | 2024-11-18T23:00:00.000+00:00 |
| wid-sec-w-2024-0737 | IBM Business Automation Workflow: Schwachstelle ermöglicht Denial of Service | 2024-03-27T23:00:00.000+00:00 | 2024-11-18T23:00:00.000+00:00 |
| wid-sec-w-2024-0736 | IBM WebSphere Application Server: Schwachstelle ermöglicht Denial of Service | 2024-03-27T23:00:00.000+00:00 | 2024-11-18T23:00:00.000+00:00 |
| wid-sec-w-2024-0729 | ZScaler Client Connector: Mehrere Schwachstellen | 2024-03-26T23:00:00.000+00:00 | 2024-11-18T23:00:00.000+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| rhsa-2012:0077 | Red Hat Security Advisory: jbossweb security update | 2012-01-31T22:57:00+00:00 | 2026-01-28T22:34:24+00:00 |
| rhsa-2012:0076 | Red Hat Security Advisory: jbossweb security update | 2012-01-31T22:56:00+00:00 | 2026-01-28T22:34:23+00:00 |
| rhsa-2012:0075 | Red Hat Security Advisory: jbossweb security update | 2012-01-31T22:55:00+00:00 | 2026-01-28T22:34:23+00:00 |
| rhsa-2012:0074 | Red Hat Security Advisory: jbossweb security update | 2012-01-31T22:55:00+00:00 | 2026-01-28T22:34:22+00:00 |
| rhsa-2012:0060 | Red Hat Security Advisory: openssl security update | 2012-01-24T20:59:00+00:00 | 2026-01-28T22:34:22+00:00 |
| rhsa-2012:0041 | Red Hat Security Advisory: jbossweb security update | 2012-01-19T17:21:00+00:00 | 2026-01-28T22:34:21+00:00 |
| rhsa-2011:1854 | Red Hat Security Advisory: krb5-appl security update | 2011-12-28T19:05:00+00:00 | 2026-01-28T22:34:21+00:00 |
| rhsa-2011:1853 | Red Hat Security Advisory: krb5 security update | 2011-12-28T19:07:00+00:00 | 2026-01-28T22:34:21+00:00 |
| rhsa-2011:1852 | Red Hat Security Advisory: krb5-appl security update | 2011-12-27T16:16:00+00:00 | 2026-01-28T22:34:20+00:00 |
| rhsa-2011:1851 | Red Hat Security Advisory: krb5 security update | 2011-12-27T16:07:00+00:00 | 2026-01-28T22:34:20+00:00 |
| rhsa-2011:1369 | Red Hat Security Advisory: httpd security update | 2011-10-13T19:33:00+00:00 | 2026-01-28T22:34:20+00:00 |
| rhsa-2011:1845 | Red Hat Security Advisory: tomcat5 security update | 2011-12-20T17:16:00+00:00 | 2026-01-28T22:34:19+00:00 |
| rhsa-2011:1797 | Red Hat Security Advisory: perl security update | 2011-12-08T18:56:00+00:00 | 2026-01-28T22:34:18+00:00 |
| rhsa-2011:1780 | Red Hat Security Advisory: tomcat6 security and bug fix update | 2011-12-05T17:39:00+00:00 | 2026-01-28T22:34:18+00:00 |
| rhsa-2011:1424 | Red Hat Security Advisory: perl security update | 2011-11-03T20:38:00+00:00 | 2026-01-28T22:34:18+00:00 |
| rhsa-2011:1392 | Red Hat Security Advisory: httpd security and bug fix update | 2011-10-20T16:50:00+00:00 | 2026-01-28T22:34:17+00:00 |
| rhsa-2011:1391 | Red Hat Security Advisory: httpd security and bug fix update | 2011-10-20T16:48:00+00:00 | 2026-01-28T22:34:16+00:00 |
| rhsa-2011:1349 | Red Hat Security Advisory: rpm security update | 2011-10-03T20:08:00+00:00 | 2026-01-28T22:34:16+00:00 |
| rhsa-2011:1300 | Red Hat Security Advisory: httpd security update | 2011-09-15T17:42:00+00:00 | 2026-01-28T22:34:16+00:00 |
| rhsa-2011:0896 | Red Hat Security Advisory: JBoss Enterprise Web Server 1.0.2 update | 2011-06-22T23:14:00+00:00 | 2026-01-28T22:34:16+00:00 |
| rhsa-2011:1330 | Red Hat Security Advisory: JBoss Enterprise Web Server 1.0.2 security update | 2011-09-21T20:00:00+00:00 | 2026-01-28T22:34:14+00:00 |
| rhsa-2011:1329 | Red Hat Security Advisory: httpd and httpd22 security update | 2011-09-21T19:50:00+00:00 | 2026-01-28T22:34:14+00:00 |
| rhsa-2010:0861 | Red Hat Security Advisory: firefox security update | 2010-11-10T19:00:00+00:00 | 2026-01-28T22:34:14+00:00 |
| rhsa-2011:1294 | Red Hat Security Advisory: httpd security update | 2011-09-14T18:59:00+00:00 | 2026-01-28T22:34:13+00:00 |
| rhsa-2011:1245 | Red Hat Security Advisory: httpd security update | 2011-08-31T22:43:00+00:00 | 2026-01-28T22:34:12+00:00 |
| rhsa-2011:0897 | Red Hat Security Advisory: JBoss Enterprise Web Server 1.0.2 update | 2011-06-22T23:31:00+00:00 | 2026-01-28T22:34:12+00:00 |
| rhsa-2011:0858 | Red Hat Security Advisory: xerces-j2 security update | 2011-06-08T14:36:00+00:00 | 2026-01-28T22:34:11+00:00 |
| rhsa-2011:0791 | Red Hat Security Advisory: tomcat6 security and bug fix update | 2011-05-19T10:55:00+00:00 | 2026-01-28T22:34:10+00:00 |
| rhsa-2011:0568 | Red Hat Security Advisory: eclipse security, bug fix, and enhancement update | 2011-05-19T11:13:00+00:00 | 2026-01-28T22:34:10+00:00 |
| rhsa-2011:0434 | Red Hat Security Advisory: security update for Red Hat Network Satellite | 2011-04-11T20:24:00+00:00 | 2026-01-28T22:34:10+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| cisco-sa-20190123-sdwan-file-write | Cisco SD-WAN Solution Arbitrary File Overwrite Vulnerability | 2019-01-23T16:00:00+00:00 | 2019-01-23T16:00:00+00:00 |
| cisco-sa-20190123-sdwan-escal | Multiple Privilege Escalation Vulnerabilities in Cisco SD-WAN Solution | 2019-01-23T16:00:00+00:00 | 2019-01-23T16:00:00+00:00 |
| cisco-sa-20190123-nfvis-shell-access | Cisco Enterprise NFV Infrastructure Software Linux Shell Access Vulnerability | 2019-01-23T16:00:00+00:00 | 2019-01-23T16:00:00+00:00 |
| cisco-sa-20190123-miner-chat-xss | Cisco SocialMiner Chat Feed Cross-Site Scripting Vulnerabilities | 2019-01-23T16:00:00+00:00 | 2019-01-23T16:00:00+00:00 |
| cisco-sa-20190123-meetings-xss | Cisco Webex Meetings Server Cross-Site Scripting Vulnerability | 2019-01-23T16:00:00+00:00 | 2019-01-23T16:00:00+00:00 |
| cisco-sa-20190123-isel-xss | Cisco Identity Services Engine Logging Cross-Site Scripting Vulnerability | 2019-01-23T16:00:00+00:00 | 2019-01-23T16:00:00+00:00 |
| cisco-sa-20190123-iot-fnd-dos | Cisco IoT Field Network Director Resource Exhaustion Denial of Service Vulnerability | 2019-01-23T16:00:00+00:00 | 2019-01-23T16:00:00+00:00 |
| cisco-sa-20190123-frpwr-mc-xss | Cisco Firepower Management Center Cross-Site Scripting Vulnerability | 2019-01-23T16:00:00+00:00 | 2019-01-23T16:00:00+00:00 |
| cisco-sa-20190123-cpi-xss | Cisco Prime Infrastructure Cross-Site Scripting Vulnerability | 2019-01-23T16:00:00+00:00 | 2019-01-23T16:00:00+00:00 |
| cisco-sa-20190123-cmx-info-discl | Cisco Connected Mobile Experiences Information Disclosure Vulnerability | 2019-01-23T16:00:00+00:00 | 2019-01-23T16:00:00+00:00 |
| cisco-sa-20190123-firepowertds-bypass | Cisco Firepower Threat Defense Software Packet Inspection and Enforcement Bypass Vulnerability | 2019-01-23T14:00:00+00:00 | 2019-01-23T14:00:00+00:00 |
| cisco-sa-20181107-sbsw-privacc | Cisco Small Business Switches Privileged Access Vulnerability | 2018-11-07T16:00:00+00:00 | 2019-01-16T22:24:00+00:00 |
| cisco-sa-20190109-webex-bs-xss | Cisco Webex Business Suite Cross-Site Scripting Vulnerability | 2019-01-09T16:00:00+00:00 | 2019-01-09T16:00:00+00:00 |
| cisco-sa-20190109-tms-xss | Cisco TelePresence Management Suite Cross-Site Scripting Vulnerability | 2019-01-09T16:00:00+00:00 | 2019-01-09T16:00:00+00:00 |
| cisco-sa-20190109-tcp | Cisco IOS and IOS XE Software TCP Denial of Service Vulnerability | 2019-01-09T16:00:00+00:00 | 2019-01-09T16:00:00+00:00 |
| cisco-sa-20190109-pnc-stored-xss | Cisco Prime Network Control System Stored Cross-Site Scripting Vulnerability | 2019-01-09T16:00:00+00:00 | 2019-01-09T16:00:00+00:00 |
| cisco-sa-20190109-phone-script-injection | Cisco IP Phone 8800 Series Arbitrary Script Injection Vulnerability | 2019-01-09T16:00:00+00:00 | 2019-01-09T16:00:00+00:00 |
| cisco-sa-20190109-jcf-im-xss | Cisco Jabber Client Framework Instant Message Cross-Site Scripting Vulnerability | 2019-01-09T16:00:00+00:00 | 2019-01-09T16:00:00+00:00 |
| cisco-sa-20190109-jabr-mac-permissions | Cisco Jabber Client Framework Insecure Directory Permissions Vulnerability | 2019-01-09T16:00:00+00:00 | 2019-01-09T16:00:00+00:00 |
| cisco-sa-20190109-ios-ssh-vrf | Cisco IOS and IOS XE Software Secure Shell Connection on VRF Vulnerability | 2019-01-09T16:00:00+00:00 | 2019-01-09T16:00:00+00:00 |
| cisco-sa-20190109-fpwr-mc-dos | Cisco Firepower Management Center Disk Utilization Denial of Service Vulnerability | 2019-01-09T16:00:00+00:00 | 2019-01-09T16:00:00+00:00 |
| cisco-sa-20190109-esa-dos | Cisco Email Security Appliance Memory Corruption Denial of Service Vulnerability | 2019-01-09T16:00:00+00:00 | 2019-01-09T16:00:00+00:00 |
| cisco-sa-20190109-cucm-creds-disclosr | Cisco Unified Communications Manager Digest Credentials Disclosure Vulnerability | 2019-01-09T16:00:00+00:00 | 2019-01-09T16:00:00+00:00 |
| cisco-sa-20190109-cps-redis | Cisco Policy Suite for Mobile and Cisco Policy Suite Diameter Routing Agent Software Redis Server Unauthenticated Access Vulnerability | 2019-01-09T16:00:00+00:00 | 2019-01-09T16:00:00+00:00 |
| cisco-sa-20190109-cps-graphite-access | Cisco Policy Suite Graphite Unauthenticated Read-Only Access Vulnerability | 2019-01-09T16:00:00+00:00 | 2019-01-09T16:00:00+00:00 |
| cisco-sa-20190109-cpi-xss | Cisco Prime Infrastructure Cross-Site Scripting Vulnerability | 2019-01-09T16:00:00+00:00 | 2019-01-09T16:00:00+00:00 |
| cisco-sa-20190109-asr900-dos | Cisco ASR 900 Series Aggregation Services Router Software Denial of Service Vulnerability | 2019-01-09T16:00:00+00:00 | 2019-01-09T16:00:00+00:00 |
| cisco-sa-20181128-plm-sql-inject | Cisco Prime License Manager SQL Injection Vulnerability | 2018-11-28T16:00:00+00:00 | 2018-12-20T15:33:00+00:00 |
| cisco-sa-20181204-ems-sql-passwrd | Cisco Energy Management Suite Default PostgreSQL Password Vulnerability | 2018-12-04T16:00:00+00:00 | 2018-12-04T16:00:00+00:00 |
| cisco-sa-20181024-webex-injection | Cisco Webex Meetings Desktop App Update Service Command Injection Vulnerability | 2018-10-24T16:00:00+00:00 | 2018-11-27T16:01:00+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| msrc_cve-2025-37757 | tipc: fix memory leak in tipc_link_xmit | 2025-05-02T00:00:00.000Z | 2025-07-11T00:00:00.000Z |
| msrc_cve-2025-37756 | net: tls: explicitly disallow disconnect | 2025-05-02T00:00:00.000Z | 2025-07-11T00:00:00.000Z |
| msrc_cve-2025-37755 | net: libwx: handle page_pool_dev_alloc_pages error | 2025-05-02T00:00:00.000Z | 2025-07-11T00:00:00.000Z |
| msrc_cve-2025-37754 | drm/i915/huc: Fix fence not released on early probe errors | 2025-05-02T00:00:00.000Z | 2025-07-11T00:00:00.000Z |
| msrc_cve-2025-37749 | net: ppp: Add bound checking for skb data on ppp_sync_txmung | 2025-05-02T00:00:00.000Z | 2025-07-11T00:00:00.000Z |
| msrc_cve-2025-37742 | jfs: Fix uninit-value access of imap allocated in the diMount() function | 2025-05-02T00:00:00.000Z | 2025-07-11T00:00:00.000Z |
| msrc_cve-2025-37741 | jfs: Prevent copying of nlink with value 0 from disk inode | 2025-05-02T00:00:00.000Z | 2025-07-11T00:00:00.000Z |
| msrc_cve-2025-37740 | jfs: add sanity check for agwidth in dbMount | 2025-05-02T00:00:00.000Z | 2025-07-11T00:00:00.000Z |
| msrc_cve-2025-37739 | f2fs: fix to avoid out-of-bounds access in f2fs_truncate_inode_blocks() | 2025-05-02T00:00:00.000Z | 2025-07-11T00:00:00.000Z |
| msrc_cve-2025-37738 | ext4: ignore xattrs past end | 2025-05-02T00:00:00.000Z | 2025-07-11T00:00:00.000Z |
| msrc_cve-2025-3360 | Glibc: glib prior to 2.82.5 is vulnerable to integer overflow and buffer under-read when parsing a very long invalid iso 8601 timestamp with g_date_time_new_from_iso8601(). | 2025-04-02T00:00:00.000Z | 2025-07-11T00:00:00.000Z |
| msrc_cve-2025-32912 | Libsoup: null pointer dereference in client when server omits the "nonce" parameter in an unauthorized response with digest authentication | 2025-04-02T00:00:00.000Z | 2025-07-11T00:00:00.000Z |
| msrc_cve-2025-32910 | Libsoup: null pointer deference on libsoup via /auth/soup-auth-digest.c through "soup_auth_digest_authenticate" on client when server omits the "realm" parameter in an unauthorized response with digest authentication | 2025-04-02T00:00:00.000Z | 2025-07-11T00:00:00.000Z |
| msrc_cve-2025-32909 | Libsoup: null pointer dereference on libsoup through function "sniff_mp4" in soup-content-sniffer.c | 2025-04-02T00:00:00.000Z | 2025-07-11T00:00:00.000Z |
| msrc_cve-2025-32907 | Libsoup: denial of service in server when client requests a large amount of overlapping ranges with range header | 2025-04-02T00:00:00.000Z | 2025-07-11T00:00:00.000Z |
| msrc_cve-2025-32415 | In libxml2 before 2.13.8 and 2.14.x before 2.14.2, xmlSchemaIDCFillNodeTables in xmlschemas.c has a heap-based buffer under-read. To exploit this, a crafted XML document must be validated against an XML schema with certain identity constraints, or a crafted XML schema must be used. | 2025-04-02T00:00:00.000Z | 2025-07-11T00:00:00.000Z |
| msrc_cve-2025-32414 | In libxml2 before 2.13.8 and 2.14.x before 2.14.2, out-of-bounds memory access can occur in the Python API (Python bindings) because of an incorrect return value. This occurs in xmlPythonFileRead and xmlPythonFileReadRaw because of a difference between bytes and characters. | 2025-04-02T00:00:00.000Z | 2025-07-11T00:00:00.000Z |
| msrc_cve-2025-32053 | Libsoup: heap buffer overflows in sniff_feed_or_html() and skip_insignificant_space() | 2025-04-02T00:00:00.000Z | 2025-07-11T00:00:00.000Z |
| msrc_cve-2025-30348 | encodeText in QDom in Qt before 6.8.0 has a complex algorithm involving XML string copy and inline replacement of parts of a string (with relocation of later data). | 2025-03-02T00:00:00.000Z | 2025-07-11T00:00:00.000Z |
| msrc_cve-2025-2953 | PyTorch torch.mkldnn_max_pool2d denial of service | 2025-03-02T00:00:00.000Z | 2025-07-11T00:00:00.000Z |
| msrc_cve-2025-27151 | redis-check-aof may lead to stack overflow and potential RCE | 2025-05-02T00:00:00.000Z | 2025-07-11T00:00:00.000Z |
| msrc_cve-2025-25199 | BCryptGenerateSymmetricKey memory leak | 2025-02-02T00:00:00.000Z | 2025-07-11T00:00:00.000Z |
| msrc_cve-2025-23163 | net: vlan: don't propagate flags on open | 2025-05-02T00:00:00.000Z | 2025-07-11T00:00:00.000Z |
| msrc_cve-2025-23161 | PCI: vmd: Make vmd_dev::cfg_lock a raw_spinlock_t type | 2025-05-02T00:00:00.000Z | 2025-07-11T00:00:00.000Z |
| msrc_cve-2025-23159 | media: venus: hfi: add a check to handle OOB in sfr region | 2025-05-02T00:00:00.000Z | 2025-07-11T00:00:00.000Z |
| msrc_cve-2025-23158 | media: venus: hfi: add check to handle incorrect queue size | 2025-05-02T00:00:00.000Z | 2025-07-11T00:00:00.000Z |
| msrc_cve-2025-23157 | media: venus: hfi_parser: add check to avoid out of bound access | 2025-05-02T00:00:00.000Z | 2025-07-11T00:00:00.000Z |
| msrc_cve-2025-23156 | media: venus: hfi_parser: refactor hfi packet parsing logic | 2025-05-02T00:00:00.000Z | 2025-07-11T00:00:00.000Z |
| msrc_cve-2025-23150 | ext4: fix off-by-one error in do_split | 2025-05-02T00:00:00.000Z | 2025-07-11T00:00:00.000Z |
| msrc_cve-2025-23148 | soc: samsung: exynos-chipid: Add NULL pointer check in exynos_chipid_probe() | 2025-05-02T00:00:00.000Z | 2025-07-11T00:00:00.000Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| opensuse-su-2024:12466-1 | jhead-3.06.0.1-2.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:12465-1 | java-1_8_0-openj9-1.8.0.352-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:12464-1 | java-17-openj9-17.0.5.0-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:12463-1 | java-11-openj9-11.0.17.0-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:12462-1 | ganglia-web-3.7.5-2.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:12461-1 | python38-3.8.15-3.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:12460-1 | chromedriver-107.0.5304.87-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:12459-1 | python39-3.9.15-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:12458-1 | python310-3.10.8-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:12457-1 | libldap-data-2.6.3-2.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:12456-1 | kernel-devel-6.0.5-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:12455-1 | xmlbeans-2.6.0-12.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:12454-1 | ctdb-4.17.2+git.273.a55a83528b9-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:12453-1 | python311-3.11.0-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:12452-1 | libreoffice-7.4.2.3-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:12451-1 | gdk-pixbuf-loader-libheif-1.12.0-5.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:12450-1 | hsqldb-2.7.1-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:12449-1 | expat-2.5.0-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:12448-1 | dbus-1-1.14.4-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:12447-1 | curl-7.86.0-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:12446-1 | bluez-5.65-4.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:12445-1 | libtpms-devel-0.9.3-2.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:12444-1 | python310-ecdsa-0.18.0-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:12443-1 | kpartx-0.9.2+57+suse.cf3c1e9-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:12442-1 | java-15-openjdk-15.0.9.0-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:12441-1 | java-13-openjdk-13.0.13.0-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:12440-1 | exiv2-0.27.5-6.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:12439-1 | MozillaThunderbird-102.4.0-2.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:12438-1 | dfu-tool-1.8.6-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:12437-1 | kernel-devel-6.0.3-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| bit-mariadb-2020-14765 | 2024-03-06T11:09:47.397Z | 2025-04-03T14:40:37.652Z | |
| bit-mariadb-2020-14550 | 2024-03-06T11:09:53.080Z | 2025-04-03T14:40:37.652Z | |
| bit-magento-2020-9692 | 2024-03-06T11:02:18.569Z | 2025-04-03T14:40:37.652Z | |
| bit-magento-2020-9691 | 2024-03-06T11:02:27.491Z | 2025-04-03T14:40:37.652Z | |
| bit-magento-2020-9690 | 2024-03-06T11:02:37.502Z | 2025-04-03T14:40:37.652Z | |
| bit-magento-2020-9689 | 2024-03-06T11:02:48.883Z | 2025-04-03T14:40:37.652Z | |
| bit-magento-2020-9632 | 2024-03-06T11:03:02.861Z | 2025-04-03T14:40:37.652Z | |
| bit-magento-2020-9631 | 2024-03-06T11:03:14.196Z | 2025-04-03T14:40:37.652Z | |
| bit-magento-2020-9630 | 2024-03-06T11:03:25.974Z | 2025-04-03T14:40:37.652Z | |
| bit-magento-2020-9591 | 2024-03-06T11:03:37.402Z | 2025-04-03T14:40:37.652Z | |
| bit-magento-2020-9588 | 2024-03-06T11:03:48.494Z | 2025-04-03T14:40:37.652Z | |
| bit-magento-2020-9587 | 2024-03-06T11:03:59.998Z | 2025-04-03T14:40:37.652Z | |
| bit-magento-2020-9585 | 2024-03-06T11:04:10.009Z | 2025-04-03T14:40:37.652Z | |
| bit-magento-2020-9584 | 2024-03-06T11:04:22.700Z | 2025-04-03T14:40:37.652Z | |
| bit-magento-2020-9583 | 2024-03-06T11:04:33.560Z | 2025-04-03T14:40:37.652Z | |
| bit-magento-2020-9582 | 2024-03-06T11:04:45.606Z | 2025-04-03T14:40:37.652Z | |
| bit-magento-2020-9581 | 2024-03-06T11:04:57.604Z | 2025-04-03T14:40:37.652Z | |
| bit-magento-2020-9580 | 2024-03-06T11:05:09.898Z | 2025-04-03T14:40:37.652Z | |
| bit-magento-2020-9579 | 2024-03-06T11:05:19.768Z | 2025-04-03T14:40:37.652Z | |
| bit-magento-2020-9578 | 2024-03-06T11:05:29.409Z | 2025-04-03T14:40:37.652Z | |
| bit-magento-2020-9577 | 2024-03-06T11:05:42.198Z | 2025-04-03T14:40:37.652Z | |
| bit-magento-2020-9576 | 2024-03-06T11:05:51.994Z | 2025-04-03T14:40:37.652Z | |
| bit-magento-2020-3758 | 2024-03-06T11:06:03.362Z | 2025-04-03T14:40:37.652Z | |
| bit-magento-2020-3719 | 2024-03-06T11:06:15.514Z | 2025-04-03T14:40:37.652Z | |
| bit-magento-2020-3718 | 2024-03-06T11:06:24.686Z | 2025-04-03T14:40:37.652Z | |
| bit-magento-2020-3717 | 2024-03-06T11:06:36.675Z | 2025-04-03T14:40:37.652Z | |
| bit-magento-2020-3716 | 2024-03-06T11:06:48.386Z | 2025-04-03T14:40:37.652Z | |
| bit-magento-2020-3715 | 2024-03-06T11:06:59.179Z | 2025-04-03T14:40:37.652Z | |
| bit-lua-2022-33099 | 2024-03-06T10:55:26.207Z | 2025-04-03T14:40:37.652Z | |
| bit-lua-2022-28805 | 2024-03-06T10:55:38.363Z | 2025-04-03T14:40:37.652Z |
| ID | Description | Updated |
|---|---|---|
| var-202401-2107 | Improper buffer restrictions in some Intel NUC BIOS firmware may allow a privileged user … | 2024-02-08T19:09:33.981000Z |
| var-202401-2104 | Improper input validation for some Intel NUC BIOS firmware before version JY0070 may allo… | 2024-02-08T19:09:33.944000Z |
| var-202310-0004 | An information disclosure in Milesight UR5X, UR32L, UR32, UR35, UR41 before v35.3.0.7 all… | 2024-02-07T23:22:09.770000Z |
| var-202401-1949 | There is a command injection vulnerability in the ssdpcgi_main function of cgibin binary … | 2024-02-07T23:16:26.905000Z |
| var-202312-0164 | SonicWall Capture Client version 3.7.10, NetExtender client version 10.2.337 and earlier … | 2024-02-07T23:13:41.014000Z |
| var-202401-1097 | The Omron FINS protocol has an authenticated feature to prevent access to memory regions.… | 2024-02-07T23:06:25.399000Z |
| var-202312-0768 | TOTOlink EX1800T v9.1.0cu.2112_B20220316 is vulnerable to unauthorized arbitrary command … | 2024-02-07T23:03:55.083000Z |
| var-202401-2029 | Hyland Perceptive Filters releases before 2023-12-08 (e.g., 11.4.0.2647), as used in Cisc… | 2024-02-07T23:03:54.290000Z |
| var-201809-0170 | VIVOTEK FD8177 devices before XXXXXX-VVTK-xx06a allow remote attackers to execute arbitra… | 2024-02-06T23:05:15.846000Z |
| var-202401-1561 | TOTOLINK A3300R V17.0.0cu.557_B20221024 was discovered to contain a command injection vul… | 2024-02-06T23:03:31.498000Z |
| var-202401-1714 | Tenda AX1803 v1.0.0.1 contains a stack overflow via the adv.iptv.stbpvid parameter in the… | 2024-02-06T23:02:37.904000Z |
| var-201806-0431 | jn_jj_server is a static file server. jn_jj_server is vulnerable to a directory traversal… | 2024-02-06T23:00:45.154000Z |
| var-202401-1823 | Under certain conditions, Internet Communication Manager (ICM) or SAP Web Dispatcher - ve… | 2024-02-06T23:00:38.703000Z |
| var-201401-0328 | The server in Cisco Unity Connection allows remote authenticated users to cause a denial … | 2024-02-06T23:00:25.785000Z |
| var-201810-0835 | Intelbras NPLUG 1.0.0.14 devices have XSS via a crafted SSID that is received via a netwo… | 2024-02-06T22:57:33.216000Z |
| var-201712-0806 | Huawei FusionSphere OpenStack V100R006C000SPC102 (NFV) has an information leak vulnerabil… | 2024-02-06T22:56:57.218000Z |
| var-201708-1333 | A vulnerability in the ConfD server of the Cisco Elastic Services Controller (ESC) could … | 2024-02-06T22:56:57.526000Z |
| var-202401-1560 | TOTOlink A3700R v9.1.2u.5822_B20200513 was discovered to contain a remote command executi… | 2024-02-06T22:56:50.130000Z |
| var-202103-0947 | This vulnerability allows network-adjacent attackers to execute arbitrary code on affecte… | 2024-02-06T22:54:55.671000Z |
| var-202401-1785 | Insecure Permissiosn vulnerability in TP Link TC70 and C200 WIFI Camera v.3 firmware v.1.… | 2024-02-06T22:54:15.275000Z |
| var-200312-0453 | SQL injection vulnerability in variables.php in Goldlink 3.0 allows remote attackers to e… | 2024-02-06T22:54:10.802000Z |
| var-200610-0174 | The default configuration of Cisco Secure Desktop (CSD) has an unchecked "Disable printin… | 2024-02-06T22:54:07.969000Z |
| var-202401-1633 | A heap buffer-overflow exists in Delta Electronics ISPSoft. An anonymous attacker can exp… | 2024-02-06T22:53:39.930000Z |
| var-201403-0054 | Directory traversal vulnerability in MayGion IP Cameras with firmware before 2013.04.22 (… | 2024-02-06T22:53:25.550000Z |
| var-201708-1119 | A heap-based buffer overflow issue was discovered in Advantech WebAccess versions prior t… | 2024-02-06T22:53:18.967000Z |
| var-201504-0273 | Cisco Web Security Appliance (WSA) devices with software 8.5.0-ise-147 do not properly re… | 2024-02-06T22:52:10.908000Z |
| var-201806-0456 | http_static_simple is an http server. http_static_simple is vulnerable to a directory tra… | 2024-02-06T22:52:07.280000Z |
| var-201812-0853 | An unrestricted Upload of File with Dangerous Type vulnerability exists on numerous metho… | 2024-02-06T22:52:00.928000Z |
| var-200303-0052 | Cisco ONS15454 and ONS15327 running ONS before 3.4 allows attackers to cause a denial of … | 2024-02-06T22:48:34.377000Z |
| var-201406-0180 | SQL injection vulnerability in user.php in the management console in Symantec Web Gateway… | 2024-02-06T22:47:55.919000Z |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| suse-su-2024:3963-1 | Security update for java-17-openjdk | 2024-11-09T16:39:18Z | 2024-11-09T16:39:18Z |
| suse-su-2024:3962-1 | Security update for apache2 | 2024-11-09T16:38:24Z | 2024-11-09T16:38:24Z |
| suse-su-2024:3961-1 | Security update for apache2 | 2024-11-09T16:37:21Z | 2024-11-09T16:37:21Z |
| suse-su-2024:3960-1 | Security update for libheif | 2024-11-08T15:26:22Z | 2024-11-08T15:26:22Z |
| suse-su-2024:3959-1 | Security update for python312 | 2024-11-08T15:25:30Z | 2024-11-08T15:25:30Z |
| suse-su-2024:3958-1 | Security update for python311 | 2024-11-08T15:25:10Z | 2024-11-08T15:25:10Z |
| suse-su-2024:3957-1 | Security update for python311 | 2024-11-08T15:24:49Z | 2024-11-08T15:24:49Z |
| suse-su-2024:3954-1 | Security update for java-21-openjdk | 2024-11-08T13:10:02Z | 2024-11-08T13:10:02Z |
| suse-su-2024:3950-1 | Security update for govulncheck-vulndb | 2024-11-08T07:57:33Z | 2024-11-08T07:57:33Z |
| suse-su-2024:3949-1 | Security update for apache2 | 2024-11-08T07:57:11Z | 2024-11-08T07:57:11Z |
| suse-su-2024:3948-1 | Security update for qemu | 2024-11-08T07:28:34Z | 2024-11-08T07:28:34Z |
| suse-su-2024:3945-1 | Security update for python39 | 2024-11-07T16:24:10Z | 2024-11-07T16:24:10Z |
| suse-su-2024:3944-1 | Security update for python3 | 2024-11-07T15:57:52Z | 2024-11-07T15:57:52Z |
| suse-su-2024:3943-1 | Security update for openssl-3 | 2024-11-07T10:12:01Z | 2024-11-07T10:12:01Z |
| suse-su-2024:3942-1 | Security update for ghostscript | 2024-11-07T10:11:48Z | 2024-11-07T10:11:48Z |
| suse-su-2024:3941-1 | Security update for ghostscript | 2024-11-07T10:10:52Z | 2024-11-07T10:10:52Z |
| suse-su-2024:3940-1 | Security update for libarchive | 2024-11-07T10:09:07Z | 2024-11-07T10:09:07Z |
| suse-su-2024:3939-1 | Security update for ruby2.1 | 2024-11-07T10:08:52Z | 2024-11-07T10:08:52Z |
| suse-su-2024:3938-1 | Security update for go1.22-openssl | 2024-11-07T10:08:23Z | 2024-11-07T10:08:23Z |
| suse-su-2024:3937-1 | Security update for go1.23-openssl | 2024-11-07T10:08:07Z | 2024-11-07T10:08:07Z |
| suse-su-2024:3929-1 | Security update for python36 | 2024-11-06T15:33:43Z | 2024-11-06T15:33:43Z |
| suse-su-2024:3926-1 | Security update for curl | 2024-11-06T10:15:27Z | 2024-11-06T10:15:27Z |
| suse-su-2024:3925-1 | Security update for curl | 2024-11-06T10:14:29Z | 2024-11-06T10:14:29Z |
| suse-su-2024:3924-1 | Security update for python310 | 2024-11-06T10:14:08Z | 2024-11-06T10:14:08Z |
| suse-su-2024:3923-1 | Security update for gradle | 2024-11-06T10:13:23Z | 2024-11-06T10:13:23Z |
| suse-su-2024:3922-1 | Security update for libgsf | 2024-11-06T10:12:18Z | 2024-11-06T10:12:18Z |
| suse-su-2024:3921-1 | Security update for libgsf | 2024-11-06T10:11:55Z | 2024-11-06T10:11:55Z |
| suse-su-2024:3920-1 | Security update for libgsf | 2024-11-06T10:11:23Z | 2024-11-06T10:11:23Z |
| suse-su-2024:3911-1 | Security update for govulncheck-vulndb | 2024-11-05T07:45:02Z | 2024-11-05T07:45:02Z |
| suse-su-2024:3905-1 | Security update for openssl-1_1 | 2024-11-04T12:39:03Z | 2024-11-04T12:39:03Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| cnvd-2025-23122 | Tenda AC18 ip/goform/saveParentControlInfo接口缓冲区溢出漏洞 | 2024-07-19 | 2025-10-09 |
| cnvd-2025-23121 | Small CRM /admin/change-password.php文件SQL注入漏洞 | 2025-05-30 | 2025-10-09 |
| cnvd-2025-23120 | Tenda AC18弱密码漏洞 | 2025-07-28 | 2025-10-09 |
| cnvd-2025-23119 | Small CRM会话劫持漏洞 | 2025-07-30 | 2025-10-09 |
| cnvd-2025-23118 | Small CRM /registration.php文件跨站脚本漏洞 | 2025-09-04 | 2025-10-09 |
| cnvd-2025-23117 | Small CRM /get-quote.php文件SQL注入漏洞 | 2025-09-10 | 2025-10-09 |
| cnvd-2025-23116 | Small CRM /profile.php文件SQL注入漏洞 | 2025-09-11 | 2025-10-09 |
| cnvd-2025-23115 | Small CRM /create-ticket.php文件SQL注入漏洞 | 2025-09-23 | 2025-10-09 |
| cnvd-2025-23114 | Tenda AC18命令注入漏洞 | 2025-09-29 | 2025-10-09 |
| cnvd-2025-23113 | Tenda AC18缓冲区溢出漏洞 | 2025-09-29 | 2025-10-09 |
| cnvd-2025-23112 | Small CRM SQL注入漏洞 | 2025-09-29 | 2025-10-09 |
| cnvd-2025-23111 | VMware NSX弱密码恢复机制漏洞 | 2025-10-01 | 2025-10-01 |
| cnvd-2025-23110 | VMware Cloud Foundation和VMware NSX用户名枚举漏洞 | 2025-10-01 | 2025-10-01 |
| cnvd-2025-23109 | VMware vCenter SMTP标头注入漏洞 | 2025-10-01 | 2025-10-01 |
| cnvd-2025-23108 | VMware Tools和VMware Aria Operations权限提升漏洞 | 2025-10-01 | 2025-10-01 |
| cnvd-2025-23107 | VMware Aria Operations信息泄露漏洞 | 2025-10-01 | 2025-10-01 |
| cnvd-2025-23106 | VMware Tools for Windows访问控制错误漏洞 | 2025-10-01 | 2025-10-01 |
| cnvd-2024-20482 | 安徽商网某系统SQL注入漏洞 | 2015-10-15 | 2025-10-01 |
| cnvd-2025-23068 | Microsoft Graphics Kernel代码执行漏洞 | 2025-09-11 | 2025-09-30 |
| cnvd-2025-23067 | Microsoft Outlook代码执行漏洞(CNVD-2025-23067) | 2025-06-13 | 2025-09-30 |
| cnvd-2025-23066 | Microsoft Outlook代码执行漏洞(CNVD-2025-23066) | 2025-06-13 | 2025-09-30 |
| cnvd-2025-23065 | Microsoft Edge (Chromium-based)欺骗漏洞(CNVD-2025-23065) | 2025-02-11 | 2025-09-30 |
| cnvd-2025-23064 | Microsoft Edge (Chromium-based)权限提升漏洞(CNVD-2025-23064) | 2025-02-27 | 2025-09-30 |
| cnvd-2025-23063 | Microsoft Edge (Chromium-based)安全功能绕过漏洞(CNVD-2025-23063) | 2025-02-28 | 2025-09-30 |
| cnvd-2025-23062 | Microsoft Edge (Chromium-based) Update权限提升漏洞(CNVD-2025-23062) | 2025-03-27 | 2025-09-30 |
| cnvd-2025-23061 | Microsoft Edge for iOS欺骗漏洞(CNVD-2025-23061) | 2025-04-09 | 2025-09-30 |
| cnvd-2025-23060 | Microsoft Edge for iOS欺骗漏洞(CNVD-2025-23060) | 2025-04-09 | 2025-09-30 |
| cnvd-2025-23059 | Microsoft Edge (Chromium-based)远程代码执行漏洞(CNVD-2025-23059) | 2025-04-09 | 2025-09-30 |
| cnvd-2025-23058 | Microsoft Edge (Chromium-based)远程代码执行漏洞(CNVD-2025-23058) | 2025-04-09 | 2025-09-30 |
| cnvd-2025-23057 | Microsoft Edge (Chromium-based) Update权限提升漏洞(CNVD-2025-23057) | 2025-06-03 | 2025-09-30 |
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2024-avi-0506 | Multiples vulnérabilités dans Juniper Secure Analytics | 2024-06-19T00:00:00.000000 | 2024-06-19T00:00:00.000000 |
| certfr-2024-avi-0505 | Multiples vulnérabilités dans Moodle | 2024-06-19T00:00:00.000000 | 2024-06-19T00:00:00.000000 |
| certfr-2024-avi-0504 | Multiples vulnérabilités dans les produits Atlassian | 2024-06-19T00:00:00.000000 | 2024-06-19T00:00:00.000000 |
| certfr-2024-avi-0503 | Multiples vulnérabilités dans Google Chrome | 2024-06-19T00:00:00.000000 | 2024-06-19T00:00:00.000000 |
| CERTFR-2024-AVI-0506 | Multiples vulnérabilités dans Juniper Secure Analytics | 2024-06-19T00:00:00.000000 | 2024-06-19T00:00:00.000000 |
| CERTFR-2024-AVI-0505 | Multiples vulnérabilités dans Moodle | 2024-06-19T00:00:00.000000 | 2024-06-19T00:00:00.000000 |
| CERTFR-2024-AVI-0504 | Multiples vulnérabilités dans les produits Atlassian | 2024-06-19T00:00:00.000000 | 2024-06-19T00:00:00.000000 |
| CERTFR-2024-AVI-0503 | Multiples vulnérabilités dans Google Chrome | 2024-06-19T00:00:00.000000 | 2024-06-19T00:00:00.000000 |
| certfr-2024-avi-0502 | Multiples vulnérabilités dans les produits VMware | 2024-06-18T00:00:00.000000 | 2024-06-18T00:00:00.000000 |
| CERTFR-2024-AVI-0502 | Multiples vulnérabilités dans les produits VMware | 2024-06-18T00:00:00.000000 | 2024-06-18T00:00:00.000000 |
| certfr-2024-avi-0501 | Multiples vulnérabilités dans les produits Nextcloud | 2024-06-17T00:00:00.000000 | 2024-06-17T00:00:00.000000 |
| certfr-2024-avi-0500 | Multiples vulnérabilités dans Elastic Kibana | 2024-06-17T00:00:00.000000 | 2024-06-17T00:00:00.000000 |
| certfr-2024-avi-0499 | Vulnérabilité dans NetApp StorageGRID | 2024-06-17T00:00:00.000000 | 2024-06-17T00:00:00.000000 |
| CERTFR-2024-AVI-0501 | Multiples vulnérabilités dans les produits Nextcloud | 2024-06-17T00:00:00.000000 | 2024-06-17T00:00:00.000000 |
| CERTFR-2024-AVI-0500 | Multiples vulnérabilités dans Elastic Kibana | 2024-06-17T00:00:00.000000 | 2024-06-17T00:00:00.000000 |
| CERTFR-2024-AVI-0499 | Vulnérabilité dans NetApp StorageGRID | 2024-06-17T00:00:00.000000 | 2024-06-17T00:00:00.000000 |
| certfr-2024-avi-0498 | Multiples vulnérabilités dans les produits IBM | 2024-06-14T00:00:00.000000 | 2024-06-14T00:00:00.000000 |
| certfr-2024-avi-0497 | Multiples vulnérabilités dans le noyau Linux de Red Hat | 2024-06-14T00:00:00.000000 | 2024-06-14T00:00:00.000000 |
| certfr-2024-avi-0496 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2024-06-14T00:00:00.000000 | 2024-06-14T00:00:00.000000 |
| certfr-2024-avi-0495 | Multiples vulnérabilités dans Microsoft Edge | 2024-06-14T00:00:00.000000 | 2024-06-14T00:00:00.000000 |
| certfr-2024-avi-0476 | Multiples vulnérabilités dans les produits Schneider Electric | 2024-06-11T00:00:00.000000 | 2024-06-14T00:00:00.000000 |
| CERTFR-2024-AVI-0498 | Multiples vulnérabilités dans les produits IBM | 2024-06-14T00:00:00.000000 | 2024-06-14T00:00:00.000000 |
| CERTFR-2024-AVI-0497 | Multiples vulnérabilités dans le noyau Linux de Red Hat | 2024-06-14T00:00:00.000000 | 2024-06-14T00:00:00.000000 |
| CERTFR-2024-AVI-0496 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2024-06-14T00:00:00.000000 | 2024-06-14T00:00:00.000000 |
| CERTFR-2024-AVI-0495 | Multiples vulnérabilités dans Microsoft Edge | 2024-06-14T00:00:00.000000 | 2024-06-14T00:00:00.000000 |
| CERTFR-2024-AVI-0476 | Multiples vulnérabilités dans les produits Schneider Electric | 2024-06-11T00:00:00.000000 | 2024-06-14T00:00:00.000000 |
| certfr-2024-avi-0492 | Multiples vulnérabilités dans Google Android et Pixel | 2024-06-13T00:00:00.000000 | 2024-06-13T00:00:00.000000 |
| certfr-2024-avi-0491 | Multiples vulnérabilités dans les produits Palo Alto Networks | 2024-06-13T00:00:00.000000 | 2024-06-13T00:00:00.000000 |
| certfr-2024-avi-0490 | Multiples vulnérabilités dans GitLab | 2024-06-13T00:00:00.000000 | 2024-06-13T00:00:00.000000 |
| CERTFR-2024-AVI-0492 | Multiples vulnérabilités dans Google Android et Pixel | 2024-06-13T00:00:00.000000 | 2024-06-13T00:00:00.000000 |