Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2025-14492 |
7.8 (3.0)
|
RealDefense SUPERAntiSpyware Exposed Dangerous Functio… |
RealDefense |
SUPERAntiSpyware |
2025-12-23T21:16:27.430Z | 2025-12-26T19:35:40.193Z |
| CVE-2025-14932 |
7.8 (3.0)
|
NSF Unidata NetCDF-C Time Unit Stack-based Buffer Over… |
NSF Unidata |
NetCDF-C |
2025-12-23T21:11:17.340Z | 2025-12-26T19:34:14.913Z |
| CVE-2025-14933 |
7.8 (3.0)
|
NSF Unidata NetCDF-C NC Variable Integer Overflow Remo… |
NSF Unidata |
NetCDF-C |
2025-12-23T21:09:15.230Z | 2025-12-26T19:33:58.950Z |
| CVE-2025-14934 |
7.8 (3.0)
|
NSF Unidata NetCDF-C Variable Name Stack-based Buffer … |
NSF Unidata |
NetCDF-C |
2025-12-23T21:09:09.693Z | 2025-12-26T19:33:30.294Z |
| CVE-2025-15094 |
5.3 (4.0)
4.3 (3.1)
4.3 (3.0)
|
sunkaifei FlyCMS User Login UserController.java userLo… |
sunkaifei |
FlyCMS |
2025-12-26T01:32:06.271Z | 2025-12-26T19:32:41.210Z |
| CVE-2025-15095 |
5.1 (4.0)
3.5 (3.1)
3.5 (3.0)
|
postmanlabs httpbin core.py cross site scripting |
postmanlabs |
httpbin |
2025-12-26T02:02:07.191Z | 2025-12-26T19:32:01.296Z |
| CVE-2025-68941 |
4.9 (3.1)
|
Gitea before 1.22.3 mishandles access to a privat… |
Gitea |
Gitea |
2025-12-26T02:31:59.031Z | 2025-12-26T19:31:33.303Z |
| CVE-2025-15097 |
6.9 (4.0)
7.3 (3.1)
7.3 (3.0)
|
Alteryx Server status improper authentication |
Alteryx |
Server |
2025-12-26T02:32:05.819Z | 2025-12-26T19:30:52.340Z |
| CVE-2025-68942 |
5.4 (3.1)
|
Gitea before 1.22.2 allows XSS because the search… |
Gitea |
Gitea |
2025-12-26T02:50:35.144Z | 2025-12-26T19:30:04.360Z |
| CVE-2025-15098 |
5.3 (4.0)
6.3 (3.1)
6.3 (3.0)
|
YunaiV yudao-cloud Business Process Management BpmSync… |
YunaiV |
yudao-cloud |
2025-12-26T03:02:06.492Z | 2025-12-26T19:29:29.970Z |
| CVE-2025-68943 |
5.3 (3.1)
|
Gitea before 1.21.8 inadvertently discloses users… |
Gitea |
Gitea |
2025-12-26T03:19:45.242Z | 2025-12-26T19:28:57.206Z |
| CVE-2025-68944 |
5 (3.1)
|
Gitea before 1.22.2 sometimes mishandles the prop… |
Gitea |
Gitea |
2025-12-26T03:37:28.693Z | 2025-12-26T19:28:23.900Z |
| CVE-2025-52601 |
6.3 (4.0)
|
Hardcoding sensitive information |
Hanwha Vision Co., Ltd. |
Device Manager |
2025-12-26T04:29:25.830Z | 2025-12-26T19:27:44.838Z |
| CVE-2025-13158 |
9.3 (4.0)
|
apidoc-core - prototype pollution in api_group.js, api… |
apiDoc |
apidoc-core |
2025-12-26T16:00:27.208Z | 2025-12-26T19:26:12.935Z |
| CVE-2025-68946 |
5.4 (3.1)
|
In Gitea before 1.20.1, a forbidden URL scheme su… |
Gitea |
Gitea |
2025-12-26T04:14:03.775Z | 2025-12-26T18:59:45.647Z |
| CVE-2025-68945 |
5.8 (3.1)
|
In Gitea before 1.21.2, an anonymous user can vis… |
Gitea |
Gitea |
2025-12-26T03:58:46.724Z | 2025-12-26T18:59:29.985Z |
| CVE-2025-68940 |
3.1 (3.1)
|
In Gitea before 1.22.5, branch deletion permissio… |
Gitea |
Gitea |
2025-12-26T02:14:52.076Z | 2025-12-26T18:57:56.965Z |
| CVE-2025-68939 |
8.2 (3.1)
|
Gitea before 1.23.0 allows attackers to add attac… |
Gitea |
Gitea |
2025-12-26T02:03:59.691Z | 2025-12-26T18:57:27.065Z |
| CVE-2025-68938 |
4.3 (3.1)
|
Gitea before 1.25.2 mishandles authorization for … |
Gitea |
Gitea |
2025-12-26T01:19:10.609Z | 2025-12-26T18:53:35.494Z |
| CVE-2024-44065 |
9.8 (3.1)
|
Time-based blind SQL Injection vulnerability in C… |
n/a |
n/a |
2025-12-26T00:00:00.000Z | 2025-12-26T18:35:58.415Z |
| CVE-2025-24148 |
5.5 (3.1)
|
This issue was addressed with improved handling o… |
Apple |
macOS |
2025-03-31T22:22:20.776Z | 2025-12-26T16:48:50.913Z |
| CVE-2025-43296 |
5.5 (3.1)
|
A logic issue was addressed with improved validat… |
Apple |
macOS |
2025-10-09T20:50:48.673Z | 2025-12-26T16:44:12.881Z |
| CVE-2025-43348 |
5.5 (3.1)
|
A logic issue was addressed with improved validat… |
Apple |
macOS |
2025-11-04T01:17:30.602Z | 2025-12-26T16:42:24.746Z |
| CVE-2025-46291 |
5.5 (3.1)
|
A logic issue was addressed with improved validat… |
Apple |
macOS |
2025-12-17T20:47:01.439Z | 2025-12-26T16:41:07.010Z |
| CVE-2025-15082 |
6.9 (4.0)
5.3 (3.1)
5.3 (3.0)
|
TOZED ZLT M30s Web Management proc_post information di… |
TOZED |
ZLT M30s |
2025-12-25T17:02:09.345Z | 2025-12-26T16:37:54.066Z |
| CVE-2025-15081 |
5.3 (4.0)
6.3 (3.1)
6.3 (3.0)
|
JD Cloud BE6500 jdcapi sub_4780 command injection |
JD |
Cloud BE6500 |
2025-12-25T15:02:06.546Z | 2025-12-26T16:37:10.227Z |
| CVE-2025-2405 |
7.6 (3.1)
|
XSS in Verisay Communication's Titarus |
Verisay Communication and Information Technology Industry and Trade Ltd. Co. |
Titarus |
2025-12-25T13:10:25.121Z | 2025-12-26T16:36:33.283Z |
| CVE-2025-15073 |
6.9 (4.0)
7.3 (3.1)
7.3 (3.0)
|
itsourcecode Online Frozen Foods Ordering System conta… |
itsourcecode |
Online Frozen Foods Ordering System |
2025-12-24T23:02:07.917Z | 2025-12-26T16:35:30.166Z |
| CVE-2025-15074 |
6.9 (4.0)
7.3 (3.1)
7.3 (3.0)
|
itsourcecode Online Frozen Foods Ordering System custo… |
itsourcecode |
Online Frozen Foods Ordering System |
2025-12-25T02:32:06.261Z | 2025-12-26T16:34:54.287Z |
| CVE-2025-15075 |
6.9 (4.0)
7.3 (3.1)
7.3 (3.0)
|
itsourcecode Student Management System student_p.php s… |
itsourcecode |
Student Management System |
2025-12-25T03:02:06.320Z | 2025-12-26T16:34:21.922Z |
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2025-15192 |
5.3 (4.0)
6.3 (3.1)
6.3 (3.0)
|
D-Link DWR-M920 formLtefotaUpgradeQuectel sub_415328 c… |
D-Link |
DWR-M920 |
2025-12-29T14:32:08.392Z | 2025-12-29T16:11:38.000Z |
| CVE-2025-15191 |
5.3 (4.0)
6.3 (3.1)
6.3 (3.0)
|
D-Link DWR-M920 formLtefotaUpgradeFibocom sub_4155B4 c… |
D-Link |
DWR-M920 |
2025-12-29T14:02:07.207Z | 2025-12-29T14:26:08.160Z |
| CVE-2025-15190 |
8.7 (4.0)
8.8 (3.1)
8.8 (3.0)
|
D-Link DWR-M920 formFilter sub_42261C stack-based overflow |
D-Link |
DWR-M920 |
2025-12-29T13:32:08.616Z | 2025-12-29T14:26:52.164Z |
| CVE-2025-15189 |
8.7 (4.0)
8.8 (3.1)
8.8 (3.0)
|
D-Link DWR-M920 formDefRoute sub_464794 buffer overflow |
D-Link |
DWR-M920 |
2025-12-29T13:02:11.742Z | 2025-12-29T13:15:00.973Z |
| CVE-2025-36154 |
6.2 (3.1)
|
IBM Concert Software Cleartext Storage in a File or on Disk. |
IBM |
Concert |
2025-12-24T19:01:48.161Z | 2025-12-24T20:02:34.098Z |
| CVE-2025-15143 |
5.1 (4.0)
4.7 (3.1)
4.7 (3.0)
|
EyouCMS Backend Template Management FilemanagerLogic.p… |
n/a |
EyouCMS |
2025-12-28T16:02:08.347Z | 2025-12-29T16:24:22.854Z |
| CVE-2020-36902 |
9.3 (4.0)
|
UBICOD Medivision Digital Signage 1.5.1 Authorization … |
UBICOD Co., Ltd. | MEDIVISION INC. |
UBICOD Medivision Digital Signage |
2025-12-10T21:05:41.753Z | 2025-12-11T18:52:29.859Z |
| CVE-2025-67809 |
4.7 (3.1)
|
An issue was discovered in Zimbra Collaboration (… |
n/a |
n/a |
2025-12-15T00:00:00.000Z | 2025-12-15T20:17:26.355Z |
| CVE-2020-36901 |
8.6 (4.0)
|
UBICOD Medivision Digital Signage 1.5.1 Cross-Site Req… |
UBICOD Co., Ltd. | MEDIVISION INC. |
UBICOD Medivision Digital Signage |
2025-12-10T21:05:21.945Z | 2025-12-11T18:52:35.866Z |
| CVE-2025-55703 |
2.5 (3.1)
|
An error-based SQL injection vulnerability exists… |
n/a |
n/a |
2025-12-15T00:00:00.000Z | 2025-12-15T20:08:08.419Z |
| CVE-2019-25243 |
8.7 (4.0)
8.8 (3.1)
|
FaceSentry 6.4.8 Authenticated Remote Command Injectio… |
iWT Ltd. |
FaceSentry Access Control System |
2025-12-24T19:27:58.965Z | 2025-12-24T20:23:05.664Z |
| CVE-2025-66587 |
N/A
|
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | N/A | N/A | 2025-12-11T20:53:08.409Z | 2025-12-30T19:53:41.641Z |
| CVE-2025-66584 |
N/A
|
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | N/A | N/A | 2025-12-11T20:58:53.846Z | 2025-12-30T19:53:19.816Z |
| CVE-2019-25242 |
5.1 (4.0)
4.3 (3.1)
|
FaceSentry Access Control System 6.4.8 Cross-Site Requ… |
iWT Ltd. |
FaceSentry Access Control System |
2025-12-24T19:27:58.523Z | 2025-12-24T20:23:12.300Z |
| CVE-2025-14860 |
9.8 (3.1)
|
Use-after-free in the Disability Access APIs component |
Mozilla |
Firefox |
2025-12-18T14:21:13.483Z | 2025-12-19T20:35:53.096Z |
| CVE-2025-14861 |
8.8 (3.1)
|
Memory safety bugs fixed in Firefox 146.0.1 |
Mozilla |
Firefox |
2025-12-18T14:21:14.680Z | 2025-12-20T04:56:38.874Z |
| CVE-2025-63757 |
7.5 (3.1)
|
Integer overflow vulnerability in the yuv2ya16_X_… |
n/a |
n/a |
2025-12-18T00:00:00.000Z | 2025-12-18T19:31:22.092Z |
| CVE-2025-63386 |
9.1 (3.1)
|
A Cross-Origin Resource Sharing (CORS) misconfigu… |
n/a |
n/a |
2025-12-18T00:00:00.000Z | 2025-12-19T21:24:32.281Z |
| CVE-2025-63388 |
9.1 (3.1)
|
A Cross-Origin Resource Sharing (CORS) misconfigu… |
n/a |
n/a |
2025-12-18T00:00:00.000Z | 2025-12-19T21:29:11.310Z |
| CVE-2025-63389 |
9.8 (3.1)
|
A critical authentication bypass vulnerability ex… |
n/a |
n/a |
2025-12-18T00:00:00.000Z | 2025-12-19T18:02:03.129Z |
| CVE-2025-63390 |
5.3 (3.1)
|
An authentication bypass vulnerability exists in … |
n/a |
n/a |
2025-12-18T00:00:00.000Z | 2025-12-19T21:27:10.654Z |
| CVE-2025-63391 |
7.5 (3.1)
|
An authentication bypass vulnerability exists in … |
n/a |
n/a |
2025-12-18T00:00:00.000Z | 2025-12-18T17:51:07.483Z |
| CVE-2025-68469 |
2 (4.0)
|
ImageMagick vulnerable to heap-buffer-overflow |
ImageMagick |
ImageMagick |
2025-12-18T15:36:28.304Z | 2025-12-18T15:52:40.496Z |
| CVE-2025-56157 |
9.8 (3.1)
|
Default credentials in Dify thru 1.5.1. PostgreSQ… |
n/a |
n/a |
2025-12-18T00:00:00.000Z | 2025-12-19T18:01:55.823Z |
| CVE-2025-59949 |
5.3 (3.1)
|
FreshRSS has Logout CSRF that Leads to DoS via <track src> |
FreshRSS |
FreshRSS |
2025-12-18T18:31:54.524Z | 2025-12-18T19:19:35.478Z |
| CVE-2024-58313 |
8.6 (4.0)
|
xbtitFM 4.1.18 Insecure File Upload in file_hosting Feature |
xbtitfm |
xbtitFM |
2025-12-11T21:43:12.094Z | 2025-12-16T16:31:05.510Z |
| CVE-2024-58312 |
8.7 (4.0)
|
xbtitFM 4.1.18 Unauthenticated Path Traversal in nfogen.php |
xbtitfm |
xbtitFM |
2025-12-11T21:42:57.485Z | 2025-12-16T16:31:09.963Z |
| CVE-2024-58309 |
8.7 (4.0)
|
xbtitFM 4.1.18 Unauthenticated SQL Injection in shoute… |
xbtitfm |
xbtitFM |
2025-12-11T21:42:23.320Z | 2025-12-16T16:31:19.233Z |
| CVE-2025-14709 |
9.3 (4.0)
9.8 (3.1)
9.8 (3.0)
|
Shiguangwu sgwbox N3 WIRELESSCFGGET http_eshell_server… |
Shiguangwu |
sgwbox N3 |
2025-12-15T07:02:07.039Z | 2025-12-15T17:33:08.135Z |
| CVE-2025-63387 |
7.5 (3.1)
|
Dify v1.9.1 is vulnerable to Insecure Permissions… |
n/a |
n/a |
2025-12-18T00:00:00.000Z | 2025-12-19T18:01:50.697Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| fkie_cve-2025-36154 | IBM Concert 1.0.0 through 2.1.0 stores sensitive information in cleartext during recursive docker b… | 2025-12-24T19:15:44.333 | 2025-12-30T20:35:00.550 |
| fkie_cve-2025-15143 | A security flaw has been discovered in EyouCMS up to 1.7.6. The affected element is an unknown func… | 2025-12-28T16:15:51.467 | 2025-12-30T20:31:31.950 |
| fkie_cve-2020-36902 | UBICOD Medivision Digital Signage 1.5.1 contains an authorization bypass vulnerability that allows … | 2025-12-10T21:16:03.037 | 2025-12-30T20:31:06.793 |
| fkie_cve-2025-67809 | An issue was discovered in Zimbra Collaboration (ZCS) 10.0 and 10.1. A hardcoded Flickr API key and… | 2025-12-15T20:15:52.103 | 2025-12-30T20:30:14.527 |
| fkie_cve-2020-36901 | UBICOD Medivision Digital Signage 1.5.1 contains a cross-site request forgery vulnerability that al… | 2025-12-10T21:16:02.847 | 2025-12-30T20:30:12.703 |
| fkie_cve-2025-55703 | An error-based SQL injection vulnerability exists in the Sunbird Power IQ 9.2.0 API. The vulnerabil… | 2025-12-15T20:15:51.607 | 2025-12-30T20:28:27.717 |
| fkie_cve-2019-25243 | FaceSentry 6.4.8 contains an authenticated remote command injection vulnerability in pingTest.php a… | 2025-12-24T20:15:52.310 | 2025-12-30T20:19:32.513 |
| fkie_cve-2025-66587 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | 2025-12-11T21:15:57.733 | 2025-12-30T20:16:01.160 |
| fkie_cve-2025-66584 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | 2025-12-11T21:15:57.263 | 2025-12-30T20:16:00.837 |
| fkie_cve-2019-25242 | FaceSentry Access Control System 6.4.8 contains a cross-site request forgery vulnerability that all… | 2025-12-24T20:15:52.150 | 2025-12-30T20:14:33.950 |
| fkie_cve-2025-14860 | Use-after-free in the Disability Access APIs component. This vulnerability affects Firefox < 146.0.1. | 2025-12-18T15:15:53.057 | 2025-12-30T20:05:41.570 |
| fkie_cve-2025-14861 | Memory safety bugs present in Firefox 146. Some of these bugs showed evidence of memory corruption … | 2025-12-18T15:15:53.157 | 2025-12-30T20:05:07.467 |
| fkie_cve-2025-63757 | Integer overflow vulnerability in the yuv2ya16_X_c_template function in libswscale/output.c in FFmp… | 2025-12-18T15:15:56.750 | 2025-12-30T20:04:35.607 |
| fkie_cve-2025-63386 | A Cross-Origin Resource Sharing (CORS) misconfiguration vulnerability exists in Dify v1.9.1 in the … | 2025-12-18T16:15:54.533 | 2025-12-30T20:02:54.327 |
| fkie_cve-2025-63388 | A Cross-Origin Resource Sharing (CORS) misconfiguration vulnerability exists in Dify v1.9.1 in the … | 2025-12-18T16:15:54.650 | 2025-12-30T20:01:16.307 |
| fkie_cve-2025-63389 | A critical authentication bypass vulnerability exists in Ollama platform's API endpoints in version… | 2025-12-18T16:15:54.760 | 2025-12-30T20:00:32.400 |
| fkie_cve-2025-63390 | An authentication bypass vulnerability exists in AnythingLLM v1.8.5 in via the /api/workspaces endp… | 2025-12-18T16:15:54.867 | 2025-12-30T19:59:45.083 |
| fkie_cve-2025-63391 | An authentication bypass vulnerability exists in Open-WebUI <=0.6.32 in the /api/config endpoint. T… | 2025-12-18T16:15:54.983 | 2025-12-30T19:58:55.447 |
| fkie_cve-2025-68469 | ImageMagick is free and open-source software used for editing and manipulating digital images. Prio… | 2025-12-18T16:15:57.700 | 2025-12-30T19:56:36.630 |
| fkie_cve-2025-56157 | Default credentials in Dify thru 1.5.1. PostgreSQL username and password specified in the docker-co… | 2025-12-18T19:16:26.687 | 2025-12-30T19:54:42.977 |
| fkie_cve-2025-59949 | FreshRSS is a free, self-hostable RSS aggregator. Versions prior to 1.27.1 have a logout cross-site… | 2025-12-18T19:16:30.847 | 2025-12-30T19:52:57.570 |
| fkie_cve-2024-58313 | xbtitFM 4.1.18 contains an insecure file upload vulnerability that allows authenticated attackers w… | 2025-12-11T22:15:52.943 | 2025-12-30T19:51:17.830 |
| fkie_cve-2024-58312 | xbtitFM 4.1.18 contains a path traversal vulnerability that allows unauthenticated attackers to acc… | 2025-12-11T22:15:52.790 | 2025-12-30T19:51:08.650 |
| fkie_cve-2024-58309 | xbtitFM 4.1.18 contains an unauthenticated SQL injection vulnerability that allows remote attackers… | 2025-12-11T22:15:52.487 | 2025-12-30T19:50:50.680 |
| fkie_cve-2025-14709 | A security vulnerability has been detected in Shiguangwu sgwbox N3 2.0.25. Affected by this issue i… | 2025-12-15T07:15:51.520 | 2025-12-30T19:45:54.163 |
| fkie_cve-2025-63387 | Dify v1.9.1 is vulnerable to Insecure Permissions. An unauthenticated attacker can directly send HT… | 2025-12-18T19:16:33.157 | 2025-12-30T19:39:12.797 |
| fkie_cve-2023-44475 | Cross-Site Request Forgery (CSRF) vulnerability in Michael Simpson Add Shortcodes Actions And Filte… | 2023-10-10T15:15:10.320 | 2025-12-30T19:38:28.437 |
| fkie_cve-2025-15048 | A vulnerability was determined in Tenda WH450 1.0.0.18. This impacts an unknown function of the fil… | 2025-12-23T23:15:44.167 | 2025-12-30T19:29:50.420 |
| fkie_cve-2025-15047 | A vulnerability was found in Tenda WH450 1.0.0.18. This affects an unknown function of the file /go… | 2025-12-23T22:15:51.860 | 2025-12-30T19:29:29.563 |
| fkie_cve-2025-15046 | A vulnerability has been found in Tenda WH450 1.0.0.18. The impacted element is an unknown function… | 2025-12-23T22:15:51.677 | 2025-12-30T19:29:13.577 |
| ID | Severity | Description | Published | Updated |
|---|---|---|---|---|
| ghsa-r64v-2m5c-fmx7 |
7.5 (3.1)
9.3 (4.0)
|
Microhard Systems IPn4G 1.1.0 contains hardcoded default credentials that cannot be changed through… | 2025-12-24T21:30:32Z | 2025-12-24T21:30:32Z |
| ghsa-m2m8-9ppp-q3c7 |
5.3 (3.1)
5.1 (4.0)
|
Teradek Cube 7.3.6 contains a cross-site request forgery vulnerability that allows attackers to cha… | 2025-12-24T21:30:32Z | 2025-12-24T21:30:32Z |
| ghsa-jmmc-j836-r5v7 |
8.8 (3.1)
8.7 (4.0)
|
Microhard Systems IPn4G 1.1.0 contains multiple authenticated remote code execution vulnerabilities… | 2025-12-24T21:30:32Z | 2025-12-24T21:30:32Z |
| ghsa-gpch-6qpg-rp8g |
5.5 (3.1)
8.7 (4.0)
|
Microhard Systems IPn4G 1.1.0 contains an authentication bypass vulnerability in the hidden system-… | 2025-12-24T21:30:31Z | 2025-12-24T21:30:32Z |
| ghsa-g4f4-x2rq-h8g8 |
5.3 (3.1)
5.1 (4.0)
|
Ecessa ShieldLink SL175EHQ 10.7.4 contains a cross-site request forgery vulnerability that allows a… | 2025-12-24T21:30:32Z | 2025-12-24T21:30:32Z |
| ghsa-fv28-hc36-43g9 |
9.8 (3.1)
8.5 (4.0)
|
GNU Barcode 0.99 contains a buffer overflow vulnerability in its code 93 encoding process that allo… | 2025-12-24T21:30:32Z | 2025-12-24T21:30:32Z |
| ghsa-cm58-6j6x-c433 |
6.5 (3.1)
7.1 (4.0)
|
Microhard Systems IPn4G 1.1.0 contains a configuration file disclosure vulnerability that allows au… | 2025-12-24T21:30:32Z | 2025-12-24T21:30:32Z |
| ghsa-9wqg-38fc-34m9 |
6.5 (3.1)
7.1 (4.0)
|
Microhard Systems IPn4G 1.1.0 contains an undocumented vulnerability that allows authenticated atta… | 2025-12-24T21:30:31Z | 2025-12-24T21:30:32Z |
| ghsa-86rg-f667-jpq7 |
5.3 (3.1)
5.1 (4.0)
|
Teradek Slice 7.3.15 contains a cross-site request forgery vulnerability that allows attackers to c… | 2025-12-24T21:30:32Z | 2025-12-24T21:30:32Z |
| ghsa-64rh-68mc-5mmx |
4.3 (3.1)
5.1 (4.0)
|
Microhard Systems IPn4G 1.1.0 contains a cross-site request forgery vulnerability that allows attac… | 2025-12-24T21:30:32Z | 2025-12-24T21:30:32Z |
| ghsa-5cqx-px25-wv82 |
5.3 (3.1)
5.1 (4.0)
|
Ecessa Edge EV150 10.7.4 contains a cross-site request forgery vulnerability that allows attackers … | 2025-12-24T21:30:32Z | 2025-12-24T21:30:32Z |
| ghsa-3fjq-mm23-rr9w |
4.3 (3.1)
5.1 (4.0)
|
Ecessa WANWorx WVR-30 versions before 10.7.4 contain a cross-site request forgery vulnerability tha… | 2025-12-24T21:30:32Z | 2025-12-24T21:30:32Z |
| ghsa-x747-j9vr-9hhj |
4.3 (3.1)
5.1 (4.0)
|
Synaccess netBooter NP-0801DU 7.4 contains a cross-site request forgery vulnerability that allows a… | 2025-12-24T21:30:31Z | 2025-12-24T21:30:31Z |
| ghsa-rjwj-m7w5-fr82 |
7.5 (3.1)
8.7 (4.0)
|
FLIR Brickstream 3D+ 2.1.742.1842 contains an unauthenticated vulnerability that allows remote atta… | 2025-12-24T21:30:31Z | 2025-12-24T21:30:31Z |
| ghsa-h2gq-4xqf-ccqf |
7.5 (3.1)
9.3 (4.0)
|
FLIR thermal traffic cameras contain an unauthenticated device manipulation vulnerability in their … | 2025-12-24T21:30:31Z | 2025-12-24T21:30:31Z |
| ghsa-ghwc-hrr9-vj2w |
9.8 (3.1)
7.1 (4.0)
|
NovaRad NovaPACS Diagnostics Viewer 8.5.19.75 contains an unauthenticated XML External Entity (XXE)… | 2025-12-24T21:30:31Z | 2025-12-24T21:30:31Z |
| ghsa-f9jj-8x8f-vvx3 |
9.8 (3.1)
9.3 (4.0)
|
Synaccess netBooter NP-02x/NP-08x 6.8 contains an authentication bypass vulnerability in the webNew… | 2025-12-24T21:30:31Z | 2025-12-24T21:30:31Z |
| ghsa-cph6-mwmj-r2r8 |
7.5 (3.1)
8.7 (4.0)
|
FLIR thermal traffic cameras contain an unauthenticated vulnerability that allows remote attackers … | 2025-12-24T21:30:31Z | 2025-12-24T21:30:31Z |
| ghsa-c68w-pf33-46g8 |
7.5 (3.1)
8.7 (4.0)
|
FLIR AX8 Thermal Camera 1.32.16 contains an unauthenticated vulnerability that allows remote attack… | 2025-12-24T21:30:31Z | 2025-12-24T21:30:31Z |
| ghsa-8j6v-82x4-pg34 |
7.5 (3.1)
9.3 (4.0)
|
FLIR AX8 Thermal Camera 1.32.16 contains hard-coded SSH and web panel credentials that cannot be ch… | 2025-12-24T21:30:31Z | 2025-12-24T21:30:31Z |
| ghsa-8hvh-73q5-g7pg |
7.5 (3.1)
8.7 (4.0)
|
FLIR Brickstream 3D+ 2.1.742.1842 contains an unauthenticated vulnerability in the ExportConfig RES… | 2025-12-24T21:30:31Z | 2025-12-24T21:30:31Z |
| ghsa-58r7-rx7j-5v4g |
9.8 (3.1)
9.3 (4.0)
|
Anviz AIM CrossChex Standard 4.3.6.0 contains a CSV injection vulnerability that allows attackers t… | 2025-12-24T21:30:31Z | 2025-12-24T21:30:31Z |
| ghsa-x4fw-5929-5227 |
7.2 (3.1)
5.1 (4.0)
|
Leica Geosystems GR10/GR25/GR30/GR50 GNSS 4.30.063 contains a stored cross-site scripting vulnerabi… | 2025-12-24T21:30:30Z | 2025-12-24T21:30:30Z |
| ghsa-wx69-963x-88g9 |
5.4 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-12-24T15:30:43Z | 2025-12-24T21:30:30Z |
| ghsa-wcqx-pwqh-x4mj |
7.5 (3.1)
7.1 (4.0)
|
SOCA Access Control System 180612 contains multiple insecure direct object reference vulnerabilitie… | 2025-12-24T21:30:30Z | 2025-12-24T21:30:30Z |
| ghsa-w77q-cf84-7mcq |
8.8 (3.1)
|
Missing Authorization vulnerability in Trustindex Widgets for Social Photo Feed social-photo-feed-w… | 2025-12-24T15:30:43Z | 2025-12-24T21:30:30Z |
| ghsa-vvm7-2r5j-f59p |
5.4 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-12-24T15:30:43Z | 2025-12-24T21:30:30Z |
| ghsa-r8pj-6rqm-3whh |
6.2 (3.1)
|
IBM Concert 1.0.0 through 2.1.0 stores sensitive information in cleartext during recursive docker b… | 2025-12-24T21:30:30Z | 2025-12-24T21:30:30Z |
| ghsa-r7mr-v7hp-8j95 |
8.8 (3.1)
|
Cross-Site Request Forgery (CSRF) vulnerability in Rustaurius Five Star Restaurant Reservations res… | 2025-12-24T15:30:43Z | 2025-12-24T21:30:30Z |
| ghsa-m662-6p96-4253 |
5.3 (3.1)
5.1 (4.0)
|
SOCA Access Control System 180612 contains a cross-site request forgery vulnerability that allows a… | 2025-12-24T21:30:30Z | 2025-12-24T21:30:30Z |
| ID | Severity | Description | Package | Published | Updated |
|---|---|---|---|---|---|
| pysec-2013-32 |
|
cache.py in Suds 0.4, when tempdir is set to None, allows local users to redirect SOAP qu… | suds | 2013-09-23T20:55:00Z | 2022-09-08T23:05:05.113905Z |
| pysec-2017-83 |
|
Scrapy 1.4 allows remote attackers to cause a denial of service (memory consumption) via … | scrapy | 2017-09-05T17:29:00Z | 2022-09-08T23:05:04.997181Z |
| pysec-2022-261 |
|
In Apache Airflow prior to 2.3.4, an insecure umask was configured for numerous Airflow c… | apache-airflow | 2022-09-02T07:15:00Z | 2022-09-08T22:36:09.971521Z |
| pysec-2022-260 |
|
Sqlalchemy mako before 1.2.2 is vulnerable to Regular expression Denial of Service when u… | mako | 2022-09-07T13:15:00Z | 2022-09-07T14:38:27.809318Z |
| pysec-2022-259 |
|
An attacker who obtains a JWT can arbitrarily forge its contents without knowing the secr… | python-jwt | 2022-09-01T18:51:51Z | 2022-09-05T01:24:44.773501Z |
| pysec-2022-258 |
|
A flaw was found in python-oslo-utils. Due to improper parsing, passwords with a double q… | oslo-utils | 2022-08-29T15:15:00Z | 2022-09-01T22:32:57.246318Z |
| pysec-2022-257 |
|
NVFLARE, versions prior to 2.1.4, contains a vulnerability that deserialization of Untrus… | nvflare | 2022-08-29T03:15:00Z | 2022-09-01T20:35:14.493490Z |
| pysec-2022-256 |
|
The Deluge Web-UI is vulnerable to XSS through a crafted torrent file. The the data from … | deluge | 2022-08-26T16:15:00Z | 2022-08-31T20:34:06.230496Z |
| pysec-2022-255 |
|
There is a NULL pointer dereference vulnerability in VTK, and it lies in IO/Infovis/vtkXM… | vtk | 2022-08-25T18:15:00Z | 2022-08-31T18:46:05.259402Z |
| pysec-2022-254 |
|
A vulnerability was found in mod_wsgi. The X-Client-IP header is not removed from a reque… | mod-wsgi | 2022-08-25T18:15:00Z | 2022-08-31T18:46:04.047573Z |
| pysec-2022-253 |
|
A flaw was found in ansible-runner. An improper escaping of the shell command, while call… | ansible-runner | 2022-08-24T16:15:00Z | 2022-08-29T16:56:41.591821Z |
| pysec-2022-252 |
|
The deep-translator project on PyPI was taken over via user account compromise via a phis… | deep-translator | 2022-08-26T17:55:00.000000Z | 2022-08-26T17:55:00.000000Z |
| pysec-2022-251 |
|
The spam project on PyPI was taken over via user account compromise via a phishing attack… | spam | 2022-08-26T17:55:00.000000Z | 2022-08-26T17:55:00.000000Z |
| pysec-2022-250 |
|
The exotel project on PyPI was taken over via user account compromise via a phishing atta… | exotel | 2022-08-26T17:55:00.000000Z | 2022-08-26T17:55:00.000000Z |
| pysec-2022-212 |
|
Jupyter Notebook is a web-based notebook environment for interactive computing. Prior to … | notebook | 2022-06-14T18:15:00Z | 2022-08-24T20:50:33.251121Z |
| pysec-2022-249 |
|
The GitHub Security Lab discovered sixteen ways to exploit a cross-site scripting vulnera… | nbconvert | 2022-08-18T19:15:00Z | 2022-08-20T05:32:49.275202Z |
| pysec-2022-248 |
|
Streamlit is a data oriented application development framework for python. Users hosting … | streamlit | 2022-08-01T22:15:00Z | 2022-08-10T17:01:37.061546Z |
| pysec-2022-247 |
|
Flask-AppBuilder is an application development framework built on top of Flask python fra… | flask-appbuilder | 2022-08-01T19:15:00Z | 2022-08-08T16:56:55.240734Z |
| pysec-2022-246 |
|
Cross-site Scripting (XSS) - Reflected in GitHub repository beancount/fava prior to 1.22.3. | fava | 2022-08-01T15:15:00Z | 2022-08-05T03:26:17.915953Z |
| pysec-2022-245 |
|
An issue was discovered in the HTTP FileResponse class in Django 3.2 before 3.2.15 and 4.… | django | 2022-08-03T14:15:00Z | 2022-08-03T16:55:03.165433Z |
| pysec-2022-244 |
|
untangle is a python library to convert XML data to python objects. untangle versions 1.2… | untangle | 2022-07-26T06:15:00Z | 2022-08-01T20:42:29.787320Z |
| pysec-2022-243 |
|
untangle is a python library to convert XML data to python objects. untangle versions 1.2… | untangle | 2022-07-26T06:15:00Z | 2022-08-01T18:50:11.676911Z |
| pysec-2022-43166 |
9.8 (3.1)
|
The scu-captcha package in PyPI v0.0.1 to v0.0.4 included a code execution backdoor inser… | scu-captcha | 2022-07-22T15:15:00+00:00 | 2022-07-29T12:45:00+00:00 |
| pysec-2022-242 |
|
The PyCrowdTangle package in PyPI before v0.0.1 included a code execution backdoor insert… | pycrowdtangle | 2022-07-22T15:15:00Z | 2022-07-29T05:45:36.692082Z |
| pysec-2022-241 |
|
The eziod package in PyPI before v0.0.1 included a code execution backdoor inserted by a … | eziod | 2022-07-22T15:15:00Z | 2022-07-29T05:45:35.868408Z |
| pysec-2022-240 |
|
Cross-site Scripting (XSS) - Reflected in GitHub repository beancount/fava prior to 1.22.2. | fava | 2022-07-25T14:15:00Z | 2022-07-27T20:32:05.236760Z |
| pysec-2022-239 |
|
The time and filter parameters in Fava prior to v1.22 are vulnerable to reflected XSS due… | fava | 2022-07-25T14:15:00Z | 2022-07-27T20:32:05.196440Z |
| pysec-2022-238 |
|
This affects the package codecov before 2.0.16. The vulnerability occurs due to not sanit… | codecov | 2022-07-13T12:15:00Z | 2022-07-26T13:13:30.178958Z |
| pysec-2022-237 |
|
In mistune through 2.0.2, support of inline markup is implemented by using regular expres… | mistune | 2022-07-25T23:15:00Z | 2022-07-26T03:40:40.758214Z |
| pysec-2022-236 |
|
The Apache Spark UI offers the possibility to enable ACLs via the configuration option sp… | pyspark | 2022-07-18T07:15:00Z | 2022-07-25T14:38:46.692270Z |
| ID | Description | Updated |
|---|---|---|
| gsd-2024-4094 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:07.871747Z |
| gsd-2024-4093 | A vulnerability, which was classified as critical, was found in SourceCodester Simple Sub… | 2024-04-24T05:02:07.861498Z |
| gsd-2024-4092 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:07.880159Z |
| gsd-2024-4091 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:07.865311Z |
| gsd-2024-4090 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:07.889333Z |
| gsd-2024-4089 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:07.882959Z |
| gsd-2024-4088 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:07.862383Z |
| gsd-2024-4087 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:07.853584Z |
| gsd-2024-4086 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:07.864266Z |
| gsd-2024-4085 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:07.862182Z |
| gsd-2024-4084 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:07.877317Z |
| gsd-2024-4083 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:07.882741Z |
| gsd-2024-4082 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:07.868830Z |
| gsd-2024-4081 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:07.854847Z |
| gsd-2024-4080 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:07.870665Z |
| gsd-2024-4079 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:07.884130Z |
| gsd-2024-4078 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:07.885076Z |
| gsd-2024-4077 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vuln… | 2024-04-24T05:02:07.881052Z |
| gsd-2024-4076 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:07.874996Z |
| gsd-2024-4075 | A vulnerability classified as problematic has been found in Kashipara Online Furniture Sh… | 2024-04-24T05:02:07.855130Z |
| gsd-2024-4074 | A vulnerability was found in Kashipara Online Furniture Shopping Ecommerce Website 1.0. I… | 2024-04-24T05:02:07.853868Z |
| gsd-2024-4073 | A vulnerability was found in Kashipara Online Furniture Shopping Ecommerce Website 1.0. I… | 2024-04-24T05:02:07.887991Z |
| gsd-2024-4072 | A vulnerability was found in Kashipara Online Furniture Shopping Ecommerce Website 1.0. I… | 2024-04-24T05:02:07.886032Z |
| gsd-2024-4071 | A vulnerability was found in Kashipara Online Furniture Shopping Ecommerce Website 1.0 an… | 2024-04-24T05:02:07.866219Z |
| gsd-2024-4070 | A vulnerability has been found in Kashipara Online Furniture Shopping Ecommerce Website 1… | 2024-04-24T05:02:07.872260Z |
| gsd-2024-4069 | A vulnerability, which was classified as critical, was found in Kashipara Online Furnitur… | 2024-04-24T05:02:07.886786Z |
| gsd-2024-4068 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:07.879380Z |
| gsd-2024-4067 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:07.878926Z |
| gsd-2024-4066 | A vulnerability classified as critical has been found in Tenda AC8 16.03.34.09. Affected … | 2024-04-24T05:02:07.884431Z |
| gsd-2024-4065 | A vulnerability was found in Tenda AC8 16.03.34.09. It has been rated as critical. This i… | 2024-04-24T05:02:07.867875Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| mal-0000-reversing-labs-a41bb309f7d0668e | 2025-12-23T08:32:14Z | 2025-12-23T08:32:14Z | |
| mal-0000-reversing-labs-228272c20978b84c | 2025-12-23T08:32:06Z | 2025-12-23T08:32:06Z | |
| mal-2025-192876 | Malicious code in suntik-tiktok (npm) | 2025-12-23T08:32:05Z | 2025-12-23T08:32:05Z |
| mal-0000-reversing-labs-b86ac651db913647 | 2025-12-23T08:32:05Z | 2025-12-23T08:32:05Z | |
| mal-2025-192875 | Malicious code in sturdyfetch9 (npm) | 2025-12-23T08:31:59Z | 2025-12-23T08:31:59Z |
| mal-0000-reversing-labs-be820b2548829337 | 2025-12-23T08:31:59Z | 2025-12-23T08:31:59Z | |
| mal-2025-192874 | Malicious code in sturdyfetch5 (npm) | 2025-12-23T08:31:52Z | 2025-12-23T08:31:52Z |
| mal-0000-reversing-labs-297f36efbf99593f | 2025-12-23T08:31:52Z | 2025-12-23T08:31:52Z | |
| mal-2025-192873 | Malicious code in sturdyfetch4 (npm) | 2025-12-23T08:31:51Z | 2025-12-23T08:31:51Z |
| mal-0000-reversing-labs-079f37214390f088 | 2025-12-23T08:31:51Z | 2025-12-23T08:31:51Z | |
| mal-2025-192872 | Malicious code in sturdyfetch3 (npm) | 2025-12-23T08:31:50Z | 2025-12-23T08:31:50Z |
| mal-0000-reversing-labs-9567c5e3e88e6d4d | 2025-12-23T08:31:50Z | 2025-12-23T08:31:50Z | |
| mal-2025-192871 | Malicious code in sturdyfetch22 (npm) | 2025-12-23T08:31:49Z | 2025-12-23T08:31:49Z |
| mal-0000-reversing-labs-ae7341999303a63a | 2025-12-23T08:31:49Z | 2025-12-23T08:31:49Z | |
| mal-2025-192870 | Malicious code in sturdyfetch21 (npm) | 2025-12-23T08:31:48Z | 2025-12-23T08:31:48Z |
| mal-0000-reversing-labs-6def62a1c73266bb | 2025-12-23T08:31:48Z | 2025-12-23T08:31:48Z | |
| mal-2025-192869 | Malicious code in sturdyfetch19 (npm) | 2025-12-23T08:31:47Z | 2025-12-23T08:31:47Z |
| mal-2025-192868 | Malicious code in sturdyfetch18 (npm) | 2025-12-23T08:31:47Z | 2025-12-23T08:31:47Z |
| mal-0000-reversing-labs-791a9dc5a23e15d3 | 2025-12-23T08:31:47Z | 2025-12-23T08:31:47Z | |
| mal-0000-reversing-labs-24b5713bb169d334 | 2025-12-23T08:31:47Z | 2025-12-23T08:31:47Z | |
| mal-2025-192867 | Malicious code in sturdyfetch17 (npm) | 2025-12-23T08:31:46Z | 2025-12-23T08:31:46Z |
| mal-0000-reversing-labs-9c5e41118759724c | 2025-12-23T08:31:46Z | 2025-12-23T08:31:46Z | |
| mal-2025-192866 | Malicious code in sturdyfetch15 (npm) | 2025-12-23T08:31:45Z | 2025-12-23T08:31:45Z |
| mal-0000-reversing-labs-abc50d5e24e7f194 | 2025-12-23T08:31:45Z | 2025-12-23T08:31:45Z | |
| mal-0000-reversing-labs-93b597b0c3ff138c | 2025-12-23T08:31:44Z | 2025-12-23T08:31:44Z | |
| mal-0000-reversing-labs-57282d726806be3d | 2025-12-23T08:31:35Z | 2025-12-23T08:31:35Z | |
| mal-2025-192865 | Malicious code in streamlinear (npm) | 2025-12-23T08:31:32Z | 2025-12-23T08:31:32Z |
| mal-0000-reversing-labs-a24399e6ec850515 | 2025-12-23T08:31:32Z | 2025-12-23T08:31:32Z | |
| mal-2025-192864 | Malicious code in stream-chain-xor (npm) | 2025-12-23T08:31:31Z | 2025-12-23T08:31:31Z |
| mal-0000-reversing-labs-32d56d5412f221a8 | 2025-12-23T08:31:31Z | 2025-12-23T08:31:31Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| wid-sec-w-2025-1246 | Cisco Unified Contact Center Express (UCCX): Mehrere Schwachstellen | 2025-06-04T22:00:00.000+00:00 | 2025-06-04T22:00:00.000+00:00 |
| wid-sec-w-2025-1243 | Synology DiskStation Manager: Schwachstelle ermöglicht Manipulation von Dateien | 2025-06-04T22:00:00.000+00:00 | 2025-06-04T22:00:00.000+00:00 |
| wid-sec-w-2025-1242 | Cisco Unified Communications Produkte: Schwachstelle ermöglicht Codeausführung mit Root Rechten | 2025-06-04T22:00:00.000+00:00 | 2025-06-04T22:00:00.000+00:00 |
| wid-sec-w-2025-1241 | Cisco Nexus Dashboard: Schwachstelle ermöglicht Offenlegung von Informationen | 2025-06-04T22:00:00.000+00:00 | 2025-06-04T22:00:00.000+00:00 |
| wid-sec-w-2025-1240 | Cisco Integrated Management Controller: Schwachstelle ermöglicht Privilegieneskalation | 2025-06-04T22:00:00.000+00:00 | 2025-06-04T22:00:00.000+00:00 |
| wid-sec-w-2025-1239 | Cisco Identity Services Engine (ISE): Schwachstelle ermöglicht Unsicheres Erzeugen von temporären Dateien | 2025-06-04T22:00:00.000+00:00 | 2025-06-04T22:00:00.000+00:00 |
| wid-sec-w-2025-1238 | Cisco Identity Services Engine (ISE) Cloud Platforms: Schwachstelle ermöglicht erlangen von Admin Rechten | 2025-06-04T22:00:00.000+00:00 | 2025-06-04T22:00:00.000+00:00 |
| wid-sec-w-2025-1237 | Cisco Unified Intelligent Contact Management Enterprise: Schwachstelle ermöglicht Cross-Site Scripting | 2025-06-04T22:00:00.000+00:00 | 2025-06-04T22:00:00.000+00:00 |
| wid-sec-w-2025-1228 | cURL: Schwachstelle ermöglicht Denial of Service | 2025-06-03T22:00:00.000+00:00 | 2025-06-04T22:00:00.000+00:00 |
| wid-sec-w-2025-0794 | Juniper Junos Space: Mehrere Schwachstellen | 2025-04-13T22:00:00.000+00:00 | 2025-06-04T22:00:00.000+00:00 |
| wid-sec-w-2025-0270 | cURL: Mehrere Schwachstellen | 2025-02-04T23:00:00.000+00:00 | 2025-06-04T22:00:00.000+00:00 |
| wid-sec-w-2025-0200 | Red Hat Enterprise Linux: Schwachstelle ermöglicht Ausspaehen von Informationen | 2025-01-27T23:00:00.000+00:00 | 2025-06-04T22:00:00.000+00:00 |
| wid-sec-w-2025-0166 | Oracle PeopleSoft: Mehrere Schwachstellen | 2025-01-21T23:00:00.000+00:00 | 2025-06-04T22:00:00.000+00:00 |
| wid-sec-w-2024-3676 | cURL: Schwachstelle ermöglicht Offenlegung von Informationen | 2024-12-10T23:00:00.000+00:00 | 2025-06-04T22:00:00.000+00:00 |
| wid-sec-w-2024-3573 | Red Hat Advanced Cluster Security: Schwachstelle ermöglicht Denial of Service | 2024-12-01T23:00:00.000+00:00 | 2025-06-04T22:00:00.000+00:00 |
| wid-sec-w-2024-3468 | Red Hat OpenShift: Schwachstelle ermöglicht Denial of Service | 2024-11-13T23:00:00.000+00:00 | 2025-06-04T22:00:00.000+00:00 |
| wid-sec-w-2024-3342 | cURL: Schwachstelle ermöglicht Denial of Service | 2024-11-05T23:00:00.000+00:00 | 2025-06-04T22:00:00.000+00:00 |
| wid-sec-w-2024-3330 | Red Hat Trusted Profile Analyzer: Schwachstelle ermöglicht Denial of Service | 2024-11-04T23:00:00.000+00:00 | 2025-06-04T22:00:00.000+00:00 |
| wid-sec-w-2024-3287 | Red Hat Enterprise Linux (buildah): Schwachstelle ermöglicht Offenlegung von Informationen | 2024-10-28T23:00:00.000+00:00 | 2025-06-04T22:00:00.000+00:00 |
| wid-sec-w-2024-3270 | Python: Schwachstelle ermöglicht Codeausführung | 2024-10-24T22:00:00.000+00:00 | 2025-06-04T22:00:00.000+00:00 |
| wid-sec-w-2024-3250 | Red Hat OpenShift: Mehrere Schwachstellen | 2024-10-21T22:00:00.000+00:00 | 2025-06-04T22:00:00.000+00:00 |
| wid-sec-w-2024-3134 | Linux Kernel: Mehrere Schwachstellen | 2024-10-09T22:00:00.000+00:00 | 2025-06-04T22:00:00.000+00:00 |
| wid-sec-w-2024-3056 | Diffie-Hellman Implementierungen: Mehrere Schwachstellen ermöglichen Denial of Service | 2024-09-30T22:00:00.000+00:00 | 2025-06-04T22:00:00.000+00:00 |
| wid-sec-w-2024-2227 | QEMU: Schwachstelle ermöglicht Denial of Service | 2024-09-25T22:00:00.000+00:00 | 2025-06-04T22:00:00.000+00:00 |
| wid-sec-w-2024-2192 | QEMU: Schwachstelle ermöglicht Offenlegung von Informationen | 2024-09-22T22:00:00.000+00:00 | 2025-06-04T22:00:00.000+00:00 |
| wid-sec-w-2024-2133 | Linux Kernel: Mehrere Schwachstellen | 2024-09-12T22:00:00.000+00:00 | 2025-06-04T22:00:00.000+00:00 |
| wid-sec-w-2024-2117 | Intel Prozessor: Mehrere Schwachstellen | 2024-09-10T22:00:00.000+00:00 | 2025-06-04T22:00:00.000+00:00 |
| wid-sec-w-2024-2075 | OpenSC: Schwachstelle ermöglicht Codeausführung | 2024-09-08T22:00:00.000+00:00 | 2025-06-04T22:00:00.000+00:00 |
| wid-sec-w-2024-2074 | Red Hat Enterprise Linux (glib2): Schwachstelle ermöglicht Manipulation von Dateien | 2024-09-08T22:00:00.000+00:00 | 2025-06-04T22:00:00.000+00:00 |
| wid-sec-w-2024-2072 | Linux Kernel: Mehrere Schwachstellen ermöglichen Denial of Service | 2024-09-05T22:00:00.000+00:00 | 2025-06-04T22:00:00.000+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| rhsa-2025:21741 | Red Hat Security Advisory: bind security update | 2025-11-19T06:20:03+00:00 | 2025-12-26T15:32:13+00:00 |
| rhsa-2025:21740 | Red Hat Security Advisory: bind security update | 2025-11-19T06:27:53+00:00 | 2025-12-26T15:32:11+00:00 |
| rhsa-2025:3016 | Red Hat Security Advisory: php:7.4 security update | 2025-03-18T18:54:25+00:00 | 2025-12-26T15:32:09+00:00 |
| rhsa-2025:3076 | Red Hat Security Advisory: php:7.4 security update | 2025-03-20T12:58:06+00:00 | 2025-12-26T15:32:08+00:00 |
| rhsa-2024:3527 | Red Hat Security Advisory: Red Hat AMQ Streams 2.7.0 release and security update | 2024-05-30T20:24:46+00:00 | 2025-12-26T15:32:08+00:00 |
| rhsa-2024:2720 | Red Hat Security Advisory: bind and dhcp security update | 2024-05-07T07:34:56+00:00 | 2025-12-26T15:32:07+00:00 |
| rhsa-2024:2621 | Red Hat Security Advisory: kernel security, bug fix, and enhancement update | 2024-04-30T17:06:58+00:00 | 2025-12-26T15:31:53+00:00 |
| rhsa-2024:1877 | Red Hat Security Advisory: kernel security and bug fix update | 2024-04-18T02:37:33+00:00 | 2025-12-26T15:31:53+00:00 |
| rhsa-2024:0930 | Red Hat Security Advisory: kernel security update | 2024-02-21T00:33:59+00:00 | 2025-12-26T15:31:53+00:00 |
| rhsa-2024:1188 | Red Hat Security Advisory: kernel security, bug fix, and enhancement update | 2024-03-06T12:44:15+00:00 | 2025-12-26T15:31:52+00:00 |
| rhsa-2024:0778 | Red Hat Security Advisory: Jenkins and Jenkins-2-plugins security update | 2024-02-12T10:38:58+00:00 | 2025-12-26T15:31:51+00:00 |
| rhsa-2024:0724 | Red Hat Security Advisory: kernel security and bug fix update | 2024-02-07T16:33:42+00:00 | 2025-12-26T15:31:51+00:00 |
| rhsa-2024:0428 | Red Hat Security Advisory: curl security and bug fix update | 2024-01-25T08:12:33+00:00 | 2025-12-26T15:31:51+00:00 |
| rhsa-2024:0776 | Red Hat Security Advisory: jenkins and jenkins-2-plugins security update | 2024-02-12T10:26:48+00:00 | 2025-12-26T15:31:50+00:00 |
| rhsa-2023:7633 | Red Hat Security Advisory: rh-mariadb105-galera and rh-mariadb105-mariadb security update | 2023-12-04T09:57:42+00:00 | 2025-12-26T15:31:48+00:00 |
| rhsa-2024:0254 | Red Hat Security Advisory: rsync security update | 2024-01-15T16:02:05+00:00 | 2025-12-26T15:31:46+00:00 |
| rhsa-2024:0427 | Red Hat Security Advisory: libtasn1 security update | 2024-01-25T08:14:15+00:00 | 2025-12-26T15:31:44+00:00 |
| rhsa-2024:0413 | Red Hat Security Advisory: libxml2 security update | 2024-01-25T08:35:03+00:00 | 2025-12-26T15:31:43+00:00 |
| rhsa-2023:3366 | Red Hat Security Advisory: OpenShift Container Platform 4.13.2 packages and security update | 2023-06-07T02:08:03+00:00 | 2025-12-26T15:31:41+00:00 |
| rhsa-2022:9107 | Red Hat Security Advisory: OpenShift Container Platform 4.11.21 bug fix and security update | 2023-01-04T06:46:11+00:00 | 2025-12-26T15:31:41+00:00 |
| rhsa-2022:8932 | Red Hat Security Advisory: Release of OpenShift Serverless Client kn 1.26.0 | 2022-12-12T18:07:50+00:00 | 2025-12-26T15:31:41+00:00 |
| rhsa-2022:8893 | Red Hat Security Advisory: OpenShift Container Platform 4.11.20 security update | 2022-12-15T21:32:49+00:00 | 2025-12-26T15:31:39+00:00 |
| rhsa-2022:7469 | Red Hat Security Advisory: container-tools:4.0 security and bug fix update | 2022-11-08T09:43:38+00:00 | 2025-12-26T15:31:37+00:00 |
| rhsa-2022:7401 | Red Hat Security Advisory: OpenShift Container Platform 4.12 security update | 2023-01-17T19:35:30+00:00 | 2025-12-26T15:31:35+00:00 |
| rhsa-2022:6527 | Red Hat Security Advisory: OpenShift Virtualization 4.11.0 RPMs security and bug fix update | 2022-09-15T09:13:04+00:00 | 2025-12-26T15:31:34+00:00 |
| rhsa-2023:5683 | Red Hat Security Advisory: mariadb:10.5 security update | 2023-10-12T13:33:46+00:00 | 2025-12-26T15:31:32+00:00 |
| rhsa-2023:5627 | Red Hat Security Advisory: kernel security, bug fix, and enhancement update | 2023-10-10T16:31:57+00:00 | 2025-12-26T15:31:32+00:00 |
| rhsa-2023:5684 | Red Hat Security Advisory: galera and mariadb security update | 2023-10-12T13:24:36+00:00 | 2025-12-26T15:31:30+00:00 |
| rhsa-2023:2138 | Red Hat Security Advisory: OpenShift Container Platform 4.13.0 CNF vRAN extras security update | 2023-05-18T02:33:37+00:00 | 2025-12-26T15:29:40+00:00 |
| rhsa-2023:5259 | Red Hat Security Advisory: mariadb:10.3 security, bug fix, and enhancement update | 2023-09-19T14:43:18+00:00 | 2025-12-26T15:29:35+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| icsa-23-166-07 | Siemens SIMATIC WinCC V7 | 2023-06-13T00:00:00.000000Z | 2025-05-06T06:00:00.000000Z |
| icsa-23-166-04 | Siemens SIMOTION | 2023-06-13T00:00:00.000000Z | 2025-05-06T06:00:00.000000Z |
| icsa-23-166-03 | Siemens SICAM Q200 Devices | 2023-06-13T00:00:00.000000Z | 2025-05-06T06:00:00.000000Z |
| icsa-23-131-06 | Siemens SCALANCE LPE9403 | 2023-05-09T00:00:00.000000Z | 2025-05-06T06:00:00.000000Z |
| icsa-23-131-05 | Siemens SINEC NMS Third-Party | 2023-05-09T00:00:00.000000Z | 2025-05-06T06:00:00.000000Z |
| icsa-23-131-04 | Siemens SIMATIC Cloud Connect 7 | 2023-05-09T00:00:00.000000Z | 2025-05-06T06:00:00.000000Z |
| icsa-23-103-12 | Siemens Polarion ALM | 2023-04-11T00:00:00.000000Z | 2025-05-06T06:00:00.000000Z |
| icsa-23-103-11 | Siemens Teamcenter Visualization and JT2Go | 2023-04-11T00:00:00.000000Z | 2025-05-06T06:00:00.000000Z |
| icsa-23-103-10 | Siemens Industrial Products | 2023-04-11T00:00:00.000000Z | 2025-05-06T06:00:00.000000Z |
| icsa-23-103-09 | Siemens SCALANCE XCM332 | 2023-04-11T00:00:00.000000Z | 2025-05-06T06:00:00.000000Z |
| icsa-23-103-08 | Siemens Mendix Forgot Password Module | 2023-04-18T19:27:35.031502Z | 2025-05-06T06:00:00.000000Z |
| icsa-23-103-05 | Siemens SCALANCE X-200IRT Devices | 2023-04-11T00:00:00.000000Z | 2025-05-06T06:00:00.000000Z |
| icsa-23-103-03 | Siemens in OPC Foundation Local Discovery Server | 2023-04-11T00:00:00.000000Z | 2025-05-06T06:00:00.000000Z |
| icsa-23-103-02 | Siemens JT Open and JT Utilities | 2023-04-11T00:00:00.000000Z | 2025-05-06T06:00:00.000000Z |
| icsa-23-075-05 | Siemens Mendix SAML Module | 2023-03-14T00:00:00.000000Z | 2025-05-06T06:00:00.000000Z |
| icsa-23-047-09 | Siemens SIMATIC Industrial Products | 2023-02-14T00:00:00.000000Z | 2025-05-06T06:00:00.000000Z |
| icsa-22-349-20 | Siemens Teamcenter Visualization and JT2Go | 2022-12-13T00:00:00.000000Z | 2025-05-06T06:00:00.000000Z |
| icsa-22-349-16 | Siemens APOGEE and TALON | 2022-12-13T00:00:00.000000Z | 2025-05-06T06:00:00.000000Z |
| icsa-22-349-14 | Siemens SISCO MMS-EASE Third Party Component | 2022-12-13T00:00:00.000000Z | 2025-05-06T06:00:00.000000Z |
| icsa-22-349-12 | Siemens Parasolid | 2022-12-13T00:00:00.000000Z | 2025-05-06T06:00:00.000000Z |
| icsa-22-349-10 | Siemens APOGEE/TALON Field Panels | 2022-12-15T00:00:00.000000Z | 2025-05-06T06:00:00.000000Z |
| icsa-22-349-08 | Siemens Polarion ALM | 2022-12-13T00:00:00.000000Z | 2025-05-06T06:00:00.000000Z |
| icsa-22-349-07 | Siemens Simcenter STAR-CCM+ | 2022-12-13T00:00:00.000000Z | 2025-05-06T06:00:00.000000Z |
| icsa-22-349-04 | Siemens SCALANCE Products | 2022-12-13T00:00:00.000000Z | 2025-05-06T06:00:00.000000Z |
| icsa-22-349-03 | Siemens Multiple Denial of Service Vulnerabilities in Industrial Products | 2022-12-13T00:00:00.000000Z | 2025-05-06T06:00:00.000000Z |
| icsa-22-314-09 | Siemens Teamcenter Visualization and JT2Go | 2022-11-08T00:00:00.000000Z | 2025-05-06T06:00:00.000000Z |
| icsa-22-314-06 | Siemens QMS Automotive | 2022-11-08T00:00:00.000000Z | 2025-05-06T06:00:00.000000Z |
| icsa-22-314-02 | Siemens Web Server Login Page of Industrial Controllers | 2022-11-08T00:00:00.000000Z | 2025-05-06T06:00:00.000000Z |
| icsa-22-286-11 | Siemens SCALANCE and RUGGEDCOM Products (Update A) | 2022-10-11T00:00:00.000000Z | 2025-05-06T06:00:00.000000Z |
| icsa-22-286-09 | Siemens SICAM P850 and P855 Devices | 2022-10-11T00:00:00.000000Z | 2025-05-06T06:00:00.000000Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| cisco-sa-ESA-HTTP-Inject-nvsycUmR | Cisco Email Security Appliance and Cisco Secure Email and Web Manager HTTP Response Header Injection Vulnerability | 2022-11-02T16:00:00+00:00 | 2022-11-02T16:00:00+00:00 |
| cisco-sa-voip-phone-csrf-k56vxvvx | Cisco IP Phone 6800, 7800, and 8800 Series with Multiplatform Firmware Cross-Site Request Forgery Vulnerability | 2022-04-06T16:00:00+00:00 | 2022-10-28T14:20:37+00:00 |
| cisco-sa-voip-phone-csrf-K56vXvVx | Cisco IP Phone 6800, 7800, and 8800 Series with Multiplatform Firmware Cross-Site Request Forgery Vulnerability | 2022-04-06T16:00:00+00:00 | 2022-10-28T14:20:37+00:00 |
| cisco-sa-ac-win-path-traverse-qo4hwbsj | Cisco AnyConnect Secure Mobility Client for Windows Uncontrolled Search Path Vulnerability | 2020-02-19T16:00:00+00:00 | 2022-10-25T13:31:56+00:00 |
| cisco-sa-ac-win-path-traverse-qO4HWBsj | Cisco AnyConnect Secure Mobility Client for Windows Uncontrolled Search Path Vulnerability | 2020-02-19T16:00:00+00:00 | 2022-10-25T13:31:56+00:00 |
| cisco-sa-anyconnect-dll-f26wwjw | Cisco AnyConnect Secure Mobility Client for Windows DLL Hijacking Vulnerability | 2020-08-05T16:00:00+00:00 | 2022-10-25T13:15:17+00:00 |
| cisco-sa-anyconnect-dll-F26WwJW | Cisco AnyConnect Secure Mobility Client for Windows DLL Hijacking Vulnerability | 2020-08-05T16:00:00+00:00 | 2022-10-25T13:15:17+00:00 |
| cisco-sa-jabber-xmpp-ne9scm | Cisco Jabber Client Software Extensible Messaging and Presence Protocol Stanza Smuggling Vulnerability | 2022-10-05T16:00:00+00:00 | 2022-10-19T20:47:17+00:00 |
| cisco-sa-jabber-xmpp-Ne9SCM | Cisco Jabber Client Software Extensible Messaging and Presence Protocol Stanza Smuggling Vulnerability | 2022-10-05T16:00:00+00:00 | 2022-10-19T20:47:17+00:00 |
| cisco-sa-meraki-mx-vpn-dos-vnesbgbf | Cisco Meraki MX and Z3 Teleworker Gateway VPN Denial of Service Vulnerability | 2022-10-19T16:00:00+00:00 | 2022-10-19T19:44:34+00:00 |
| cisco-sa-meraki-mx-vpn-dos-vnESbgBf | Cisco Meraki MX and Z3 Teleworker Gateway VPN Denial of Service Vulnerability | 2022-10-19T16:00:00+00:00 | 2022-10-19T19:44:34+00:00 |
| cisco-sa-roomos-trav-befvccyu | Cisco TelePresence Collaboration Endpoint and RoomOS Software Vulnerabilities | 2022-10-19T16:00:00+00:00 | 2022-10-19T16:00:00+00:00 |
| cisco-sa-roomos-trav-beFvCcyu | Cisco TelePresence Collaboration Endpoint and RoomOS Software Vulnerabilities | 2022-10-19T16:00:00+00:00 | 2022-10-19T16:00:00+00:00 |
| cisco-sa-vu855201-j3z8cktx | Vulnerabilities in Layer 2 Network Security Controls Affecting Cisco Products: September 2022 | 2022-09-27T16:00:00+00:00 | 2022-10-05T18:16:08+00:00 |
| cisco-sa-VU855201-J3z8CKTX | Vulnerabilities in Layer 2 Network Security Controls Affecting Cisco Products: September 2022 | 2022-09-27T16:00:00+00:00 | 2022-10-05T18:16:08+00:00 |
| cisco-sa-nfvis-isv-bqrvev2h | Cisco Enterprise NFV Infrastructure Software Improper Signature Verification Vulnerability | 2022-10-05T16:00:00+00:00 | 2022-10-05T16:00:00+00:00 |
| cisco-sa-expressway-csrf-sqpssfy6 | Cisco Expressway Series and Cisco TelePresence Video Communication Server Vulnerabilities | 2022-10-05T16:00:00+00:00 | 2022-10-05T16:00:00+00:00 |
| cisco-sa-expressway-csrf-sqpsSfY6 | Cisco Expressway Series and Cisco TelePresence Video Communication Server Vulnerabilities | 2022-10-05T16:00:00+00:00 | 2022-10-05T16:00:00+00:00 |
| cisco-sa-ctt-ivv-4a66dsfj | Cisco Touch 10 Devices Insufficient Identity Verification Vulnerability | 2022-10-05T16:00:00+00:00 | 2022-10-05T16:00:00+00:00 |
| cisco-sa-ctt-dav-hsvehhet | Cisco Touch 10 Devices Downgrade Vulnerability | 2022-10-05T16:00:00+00:00 | 2022-10-05T16:00:00+00:00 |
| cisco-sa-cssm-priv-esc-sejz69dv | Cisco Smart Software Manager On-Prem Privilege Escalation Vulnerability | 2022-10-05T16:00:00+00:00 | 2022-10-05T16:00:00+00:00 |
| cisco-sa-cssm-priv-esc-SEjz69dv | Cisco Smart Software Manager On-Prem Privilege Escalation Vulnerability | 2022-10-05T16:00:00+00:00 | 2022-10-05T16:00:00+00:00 |
| cisco-sa-bw-thinrcpt-xss-gsj4cecu | Cisco BroadWorks Hosted Thin Receptionist Cross-Site Scripting Vulnerability | 2022-10-05T16:00:00+00:00 | 2022-10-05T16:00:00+00:00 |
| cisco-sa-bw-thinrcpt-xss-gSj4CecU | Cisco BroadWorks Hosted Thin Receptionist Cross-Site Scripting Vulnerability | 2022-10-05T16:00:00+00:00 | 2022-10-05T16:00:00+00:00 |
| cisco-sa-ata19x-multivuln-gezyvvs | Cisco ATA 190 Series Analog Telephone Adapter Software Vulnerabilities | 2022-10-05T16:00:00+00:00 | 2022-10-05T16:00:00+00:00 |
| cisco-sa-ata19x-multivuln-GEZYVvs | Cisco ATA 190 Series Analog Telephone Adapter Software Vulnerabilities | 2022-10-05T16:00:00+00:00 | 2022-10-05T16:00:00+00:00 |
| cisco-sa-NFVIS-ISV-BQrvEv2h | Cisco Enterprise NFV Infrastructure Software Improper Signature Verification Vulnerability | 2022-10-05T16:00:00+00:00 | 2022-10-05T16:00:00+00:00 |
| cisco-sa-CTT-IVV-4A66Dsfj | Cisco Touch 10 Devices Insufficient Identity Verification Vulnerability | 2022-10-05T16:00:00+00:00 | 2022-10-05T16:00:00+00:00 |
| cisco-sa-CTT-DAV-HSvEHHEt | Cisco Touch 10 Devices Downgrade Vulnerability | 2022-10-05T16:00:00+00:00 | 2022-10-05T16:00:00+00:00 |
| cisco-sa-apvlan-tdttb4fy | Cisco Access Points VLAN Bypass from Native VLAN Vulnerability | 2022-09-27T16:00:00+00:00 | 2022-10-04T13:22:46+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| msrc_cve-2025-59511 | Windows WLAN Service Elevation of Privilege Vulnerability | 2025-11-11T08:00:00.000Z | 2025-11-11T08:00:00.000Z |
| msrc_cve-2025-59510 | Windows Routing and Remote Access Service (RRAS) Denial of Service Vulnerability | 2025-11-11T08:00:00.000Z | 2025-11-11T08:00:00.000Z |
| msrc_cve-2025-59509 | Windows Speech Recognition Information Disclosure Vulnerability | 2025-11-11T08:00:00.000Z | 2025-11-11T08:00:00.000Z |
| msrc_cve-2025-59508 | Windows Speech Recognition Elevation of Privilege Vulnerability | 2025-11-11T08:00:00.000Z | 2025-11-11T08:00:00.000Z |
| msrc_cve-2025-59507 | Windows Speech Runtime Elevation of Privilege Vulnerability | 2025-11-11T08:00:00.000Z | 2025-11-11T08:00:00.000Z |
| msrc_cve-2025-59506 | DirectX Graphics Kernel Elevation of Privilege Vulnerability | 2025-11-11T08:00:00.000Z | 2025-11-11T08:00:00.000Z |
| msrc_cve-2025-59505 | Windows Smart Card Reader Elevation of Privilege Vulnerability | 2025-11-11T08:00:00.000Z | 2025-11-11T08:00:00.000Z |
| msrc_cve-2025-59504 | Azure Monitor Agent Remote Code Execution Vulnerability | 2025-11-11T08:00:00.000Z | 2025-11-11T08:00:00.000Z |
| msrc_cve-2025-59499 | Microsoft SQL Server Elevation of Privilege Vulnerability | 2025-11-11T08:00:00.000Z | 2025-11-11T08:00:00.000Z |
| msrc_cve-2025-59240 | Microsoft Excel Information Disclosure Vulnerability | 2025-11-11T08:00:00.000Z | 2025-11-11T08:00:00.000Z |
| msrc_cve-2025-47179 | Configuration Manager Elevation of Privilege Vulnerability | 2025-11-11T08:00:00.000Z | 2025-11-11T08:00:00.000Z |
| msrc_cve-2025-30398 | Nuance PowerScribe 360 Information Disclosure Vulnerability | 2025-11-11T08:00:00.000Z | 2025-11-11T08:00:00.000Z |
| msrc_cve-2025-12863 | Libxml2: namespace use-after-free in xmlsettreedoc() function of libxml2 | 2025-11-02T00:00:00.000Z | 2025-11-11T01:01:30.000Z |
| msrc_cve-2025-60753 | An issue was discovered in libarchive bsdtar before version 3.8.1 in function apply_substitution in file tar/subst.c when processing crafted -s substitution rules. This can cause unbounded memory allocation and lead to denial of service (Out-of-Memory crash). | 2025-11-02T00:00:00.000Z | 2025-11-11T01:01:21.000Z |
| msrc_cve-2025-40109 | crypto: rng - Ensure set_ent is always present | 2025-11-02T00:00:00.000Z | 2025-11-10T01:03:03.000Z |
| msrc_cve-2022-49803 | netdevsim: Fix memory leak of nsim_dev->fa_cookie | 2025-05-02T00:00:00.000Z | 2025-11-09T01:01:29.000Z |
| msrc_cve-2022-49766 | netlink: Bounds-check struct nlmsgerr creation | 2025-05-02T00:00:00.000Z | 2025-11-08T01:08:11.000Z |
| msrc_cve-2022-49764 | bpf: Prevent bpf program recursion for raw tracepoint probes | 2025-05-02T00:00:00.000Z | 2025-11-08T01:08:05.000Z |
| msrc_cve-2023-53064 | iavf: fix hang on reboot with ice | 2025-05-02T00:00:00.000Z | 2025-11-08T01:02:25.000Z |
| msrc_cve-2025-23143 | net: Fix null-ptr-deref by sock_lock_init_class_and_name() and rmmod. | 2025-05-02T00:00:00.000Z | 2025-11-07T01:01:21.000Z |
| msrc_cve-2025-23129 | wifi: ath11k: Clear affinity hint before calling ath11k_pcic_free_irq() in error path | 2025-04-02T00:00:00.000Z | 2025-11-06T01:01:28.000Z |
| msrc_cve-2025-61099 | FRRouting/frr from v2.0 through v10.4.1 was discovered to contain a NULL pointer dereference via the opaque_info_detail function at ospf_opaque.c. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted LS Update packet. | 2025-10-02T00:00:00.000Z | 2025-11-05T01:01:58.000Z |
| msrc_cve-2025-40107 | can: hi311x: fix null pointer dereference when resuming from sleep before interface was enabled | 2025-11-02T00:00:00.000Z | 2025-11-04T01:01:14.000Z |
| msrc_cve-2025-61104 | FRRouting/frr from v4.0 through v10.4.1 was discovered to contain a NULL pointer dereference via the show_vty_unknown_tlv function at ospf_ext.c. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted OSPF packet. | 2025-10-02T00:00:00.000Z | 2025-11-02T01:02:44.000Z |
| msrc_cve-2025-61100 | FRRouting/frr from v2.0 through v10.4.1 was discovered to contain a NULL pointer dereference via the ospf_opaque_lsa_dump function at ospf_opaque.c. This vulnerability allows attackers to cause a Denial of Service (DoS) under specific malformed LSA conditions. | 2025-10-02T00:00:00.000Z | 2025-11-02T01:02:36.000Z |
| msrc_cve-2025-61101 | FRRouting/frr from v4.0 through v10.4.1 was discovered to contain a NULL pointer dereference via the show_vty_ext_link_rmt_itf_addr function at ospf_ext.c. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted OSPF packet. | 2025-10-02T00:00:00.000Z | 2025-11-02T01:02:28.000Z |
| msrc_cve-2025-22090 | x86/mm/pat: Fix VM_PAT handling when fork() fails in copy_page_range() | 2025-04-02T00:00:00.000Z | 2025-11-02T01:02:16.000Z |
| msrc_cve-2025-21955 | ksmbd: prevent connection release during oplock break notification | 2025-04-02T00:00:00.000Z | 2025-11-02T01:01:47.000Z |
| msrc_cve-2025-21899 | tracing: Fix bad hist from corrupting named_triggers list | 2025-04-02T00:00:00.000Z | 2025-11-02T01:01:41.000Z |
| msrc_cve-2025-21894 | net: enetc: VFs do not support HWTSTAMP_TX_ONESTEP_SYNC | 2025-04-02T00:00:00.000Z | 2025-11-02T01:01:35.000Z |
| ID | Description | Updated |
|---|---|---|
| var-201910-1485 | The ICMPv6 parser in tcpdump before 4.9.3 has a buffer over-read in print-icmp6.c. tcpdum… | 2024-07-23T19:58:51.697000Z |
| var-201912-0539 | Multiple memory corruption issues were addressed with improved memory handling. This issu… | 2024-07-23T19:58:21.210000Z |
| var-201108-0150 | Integer overflow in Adobe Flash Player before 10.3.183.5 on Windows, Mac OS X, Linux, and… | 2024-07-23T19:58:20.920000Z |
| var-201306-0238 | Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java … | 2024-07-23T19:58:18.960000Z |
| var-202205-2059 | Out-of-bounds Write in GitHub repository vim/vim prior to 8.2. Vim is a cross-platform te… | 2024-07-23T19:55:59.007000Z |
| var-201912-0478 | A memory initialization issue was addressed with improved memory handling. This issue is … | 2024-07-23T19:55:59.462000Z |
| var-201912-0609 | Multiple memory corruption issues were addressed with improved memory handling. This issu… | 2024-07-23T19:55:16.319000Z |
| var-202001-1866 | xmlStringLenDecodeEntities in parser.c in libxml2 2.9.10 has an infinite loop in a certai… | 2024-07-23T19:54:45.829000Z |
| var-200703-0017 | Stack-based buffer overflow in Apple QuickTime before 7.1.5 allows remote user-assisted a… | 2024-07-23T19:54:44.982000Z |
| var-200603-0273 | automount in Mac OS X 10.4.5 and earlier allows remote file servers to cause a denial of … | 2024-07-23T19:54:44.742000Z |
| var-201504-0064 | The (1) mod_dav_svn and (2) svnserve servers in Subversion 1.6.0 through 1.7.19 and 1.8.0… | 2024-07-23T19:54:43.473000Z |
| var-201310-0612 | Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, J… | 2024-07-23T19:54:42.029000Z |
| var-202201-0326 | defineAttribute in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflo… | 2024-07-23T19:54:41.494000Z |
| var-201601-0029 | The resend_bytes function in roaming_common.c in the client in OpenSSH 5.x, 6.x, and 7.x … | 2024-07-23T19:54:41.157000Z |
| var-201605-0133 | The file_check_mem function in funcs.c in file before 5.23, as used in the Fileinfo compo… | 2024-07-23T19:54:39.932000Z |
| var-201302-0147 | Buffer overflow in Adobe Flash Player before 10.3.183.63 and 11.x before 11.6.602.168 on … | 2024-07-23T19:54:27.792000Z |
| var-201202-0206 | Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java … | 2024-07-23T19:54:25.619000Z |
| var-201110-0291 | The mod_proxy module in the Apache HTTP Server 1.3.x through 1.3.42, 2.0.x through 2.0.64… | 2024-07-23T19:54:25.746000Z |
| var-201905-0080 | A flaw was discovered in wildfly versions up to 16.0.0.Final that would allow local users… | 2024-07-23T19:54:24.312000Z |
| var-201701-1135 | NTP before 4.2.8p6 and 4.3.x before 4.3.90 allows remote attackers to bypass the origin t… | 2024-07-23T19:54:24.472000Z |
| var-201103-0287 | The VpMemAlloc function in bigdecimal.c in the BigDecimal class in Ruby 1.9.2-p136 and ea… | 2024-07-23T19:54:23.870000Z |
| var-201202-0323 | Heap-based buffer overflow in process.c in smbd in Samba 3.0, as used in the file-sharing… | 2024-07-23T19:54:14.463000Z |
| var-200704-0740 | The IPv6 protocol allows remote attackers to cause a denial of service via crafted IPv6 t… | 2024-07-23T19:54:14.554000Z |
| var-201710-1403 | An issue was discovered in certain Apple products. iOS before 11 is affected. Safari befo… | 2024-07-23T19:54:05.781000Z |
| var-202003-1776 | FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between seriali… | 2024-07-23T19:54:00.141000Z |
| var-202207-0107 | AES OCB mode for 32-bit x86 platforms using the AES-NI assembly optimised implementation … | 2024-07-23T19:53:59.023000Z |
| var-201410-1319 | Integer overflow in bufferobject.c in Python before 2.7.8 allows context-dependent attack… | 2024-07-23T19:53:58.133000Z |
| var-202112-2540 | vim is vulnerable to Use After Free. (CVE-2021-3984, CVE-2021-4019, CVE-2021-4069). -----… | 2024-07-23T19:53:56.142000Z |
| var-201710-1433 | Heap-based buffer overflow in dnsmasq before 2.78 allows remote attackers to cause a deni… | 2024-07-23T19:53:25.247000Z |
| var-201606-0395 | The xmlParseElementDecl function in parser.c in libxml2 before 2.9.4 allows context-depen… | 2024-07-23T19:53:25.161000Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| jvndb-2019-000012 | Multiple vulnerabilities in Nablarch | 2019-02-27T17:14+09:00 | 2019-09-27T10:15+09:00 |
| jvndb-2019-000011 | WordPress plugin "FormCraft" vulnerable to cross-site request forgery | 2019-02-26T14:46+09:00 | 2019-09-27T10:12+09:00 |
| jvndb-2019-000013 | Windows 7 may insecurely load Dynamic Link Libraries | 2019-02-28T15:52+09:00 | 2019-09-27T10:09+09:00 |
| jvndb-2019-000015 | iChain Insurance Wallet App for iOS vulnerable to directory traversal | 2019-03-12T14:28+09:00 | 2019-09-27T10:04+09:00 |
| jvndb-2019-000016 | WordPress plugin "Smart Forms" vulnerable to cross-site request forgery | 2019-02-28T15:57+09:00 | 2019-09-27T09:59+09:00 |
| jvndb-2018-000128 | Multiple vulnerabilities in multiple SEIKO EPSON printers and scanners | 2018-12-06T16:19+09:00 | 2019-09-27T09:55+09:00 |
| jvndb-2019-000017 | Dradis Community Edition and Dradis Professional Edition vulnerable to cross-site scripting | 2019-03-05T14:18+09:00 | 2019-09-27T09:54+09:00 |
| jvndb-2018-000107 | OpenAM (Open Source Edition) vulnerable to session management | 2018-10-12T14:44+09:00 | 2019-09-26T18:10+09:00 |
| jvndb-2019-000004 | UNLHA32.DLL, UNARJ32.DLL, LHMelting and LMLzh32.DLL may insecurely load Dynamic Link Libraries | 2019-01-31T15:46+09:00 | 2019-09-26T18:08+09:00 |
| jvndb-2019-000006 | POWER EGG vulnerability where EL expression may be executed | 2019-02-05T14:09+09:00 | 2019-09-26T18:05+09:00 |
| jvndb-2019-000018 | "an" App for iOS vulnerable to directory traversal | 2019-03-19T15:51+09:00 | 2019-09-26T17:56+09:00 |
| jvndb-2019-000019 | KinagaCMS vulnerable to cross-site scripting | 2019-03-15T17:03+09:00 | 2019-09-26T17:10+09:00 |
| jvndb-2019-000057 | SHIRASAGI vulnerable to open redirect | 2019-09-10T13:56+09:00 | 2019-09-10T13:56+09:00 |
| jvndb-2019-008917 | Multiple Vulnerabilities in Hitachi Command Suite and Hitachi Infrastructure Analytics Advisor | 2019-09-09T15:58+09:00 | 2019-09-09T15:58+09:00 |
| jvndb-2019-000005 | The installers of UNLHA32.DLL, UNARJ32.DLL and LHMelting may insecurely load Dynamic Link Libraries | 2019-01-31T15:35+09:00 | 2019-08-28T12:08+09:00 |
| jvndb-2019-000007 | OpenAM (Open Source Edition) vulnerable to open redirect | 2019-02-06T15:45+09:00 | 2019-08-28T11:00+09:00 |
| jvndb-2018-000132 | Multiple vulnerabilities in Toshiba Lighting & Technology Corporation Home gateway | 2018-12-19T15:20+09:00 | 2019-08-28T10:45+09:00 |
| jvndb-2018-000133 | cordova-plugin-ionic-webview vulnerable to path traversal | 2018-12-21T14:17+09:00 | 2019-08-28T10:04+09:00 |
| jvndb-2018-000125 | The installer of MARKET SPEED may insecurely load Dynamic Link Libraries | 2018-11-28T17:27+09:00 | 2019-08-28T10:01+09:00 |
| jvndb-2019-000001 | WordPress plugin "spam-byebye" vulnerable to cross-site scripting | 2019-01-10T15:45+09:00 | 2019-08-28T09:54+09:00 |
| jvndb-2018-000092 | Multiple vulnerabilities in INplc | 2018-09-07T16:49+09:00 | 2019-08-28T09:51+09:00 |
| jvndb-2018-000127 | EC-CUBE vulnerable to open redirect | 2018-11-28T17:24+09:00 | 2019-08-28T09:42+09:00 |
| jvndb-2018-000118 | The installer of Windows10 Fall Creators Update Modify module for Security Measures tool may insecurely load Dynamic Link Libraries | 2018-11-09T16:13+09:00 | 2019-08-27T18:03+09:00 |
| jvndb-2018-000093 | Multiple script injection vulnerabilities in multiple Yamaha network devices | 2018-08-29T18:01+09:00 | 2019-08-27T17:53+09:00 |
| jvndb-2018-000122 | Multiple vulnerabilities in Panasonic BN-SDWBP3 | 2019-06-28T18:28+09:00 | 2019-08-27T17:46+09:00 |
| jvndb-2018-000134 | PgpoolAdmin fails to restrict access permissions | 2018-12-21T14:10+09:00 | 2019-08-27T17:41+09:00 |
| jvndb-2018-000100 | +Message App fails to verify SSL server certificates | 2018-09-27T16:52+09:00 | 2019-08-27T17:22+09:00 |
| jvndb-2018-000124 | Multiple vulnerabilities in RICOH Interactive Whiteboard | 2018-11-27T15:26+09:00 | 2019-08-27T17:01+09:00 |
| jvndb-2018-000076 | Multiple vulnerabilities in Aterm W300P | 2018-07-12T15:04+09:00 | 2019-08-27T16:56+09:00 |
| jvndb-2018-000130 | Cybozu Garoon access restriction bypass vulnerability | 2018-12-10T14:14+09:00 | 2019-08-27T16:54+09:00 |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| suse-su-2025:03100-1 | Security update for the Linux Kernel RT (Live Patch 6 for SLE 15 SP6) | 2025-09-08T20:04:51Z | 2025-09-08T20:04:51Z |
| suse-su-2025:03097-1 | Security update for the Linux Kernel RT (Live Patch 1 for SLE 15 SP6) | 2025-09-08T20:04:31Z | 2025-09-08T20:04:31Z |
| suse-su-2025:03096-1 | Security update for ovmf | 2025-09-08T16:09:37Z | 2025-09-08T16:09:37Z |
| suse-su-2025:20694-1 | Security update for gdk-pixbuf | 2025-09-08T13:49:35Z | 2025-09-08T13:49:35Z |
| suse-su-2025:20693-1 | Security update for gstreamer | 2025-09-08T13:49:35Z | 2025-09-08T13:49:35Z |
| suse-su-2025:03095-1 | Security update for firebird | 2025-09-08T13:38:39Z | 2025-09-08T13:38:39Z |
| suse-su-2025:20692-1 | Security update for podman | 2025-09-08T13:37:03Z | 2025-09-08T13:37:03Z |
| suse-su-2025:03091-1 | Security update for libsoup2 | 2025-09-05T13:29:45Z | 2025-09-05T13:29:45Z |
| suse-su-2025:20657-1 | Security update for aide | 2025-09-05T12:57:05Z | 2025-09-05T12:57:05Z |
| suse-su-2025:20656-1 | Security update for cloud-init | 2025-09-05T12:57:05Z | 2025-09-05T12:57:05Z |
| suse-su-2025:20655-1 | Security update for jq | 2025-09-05T12:57:05Z | 2025-09-05T12:57:05Z |
| suse-su-2025:20654-1 | Security update for grub2 | 2025-09-05T12:57:04Z | 2025-09-05T12:57:04Z |
| suse-su-2025:20673-1 | Security update for glib2 | 2025-09-05T12:22:09Z | 2025-09-05T12:22:09Z |
| suse-su-2025:20671-1 | Security update for opensc | 2025-09-05T12:16:37Z | 2025-09-05T12:16:37Z |
| suse-su-2025:20672-1 | Security update for protobuf | 2025-09-05T12:16:11Z | 2025-09-05T12:16:11Z |
| suse-su-2025:20670-1 | Security update for dpkg | 2025-09-05T12:15:24Z | 2025-09-05T12:15:24Z |
| suse-su-2025:20653-1 | Security update for the Linux Kernel | 2025-09-05T12:02:35Z | 2025-09-05T12:02:35Z |
| suse-su-2025:20669-1 | Security update for the Linux Kernel | 2025-09-05T11:15:11Z | 2025-09-05T11:15:11Z |
| suse-su-2025:03088-1 | Security update for perl-Authen-SASL, perl-Crypt-URandom | 2025-09-05T10:36:26Z | 2025-09-05T10:36:26Z |
| suse-su-2025:03087-1 | Security update for perl-Authen-SASL, perl-Crypt-URandom | 2025-09-05T10:33:21Z | 2025-09-05T10:33:21Z |
| suse-su-2025:03082-1 | Security update for python-maturin | 2025-09-05T08:27:38Z | 2025-09-05T08:27:38Z |
| suse-ru-2025:03081-1 | Recommended update for perl-YAML-LibYAML | 2025-09-05T06:58:53Z | 2025-09-05T06:58:53Z |
| suse-su-2025:00614-1 | Security update for postgresql15 | 2025-09-04T13:26:20Z | 2025-09-04T13:26:20Z |
| suse-su-2025:03077-1 | Security update for rav1e | 2025-09-04T10:54:50Z | 2025-09-04T10:54:50Z |
| suse-su-2025:03076-1 | Security update for ovmf | 2025-09-04T10:51:24Z | 2025-09-04T10:51:24Z |
| suse-su-2025:03075-1 | Security update for gimp | 2025-09-04T10:48:19Z | 2025-09-04T10:48:19Z |
| suse-su-2025:03074-1 | Security update for python-Django | 2025-09-04T10:46:20Z | 2025-09-04T10:46:20Z |
| suse-su-2025:02814-2 | Security update for ruby2.5 | 2025-09-04T09:16:41Z | 2025-09-04T09:16:41Z |
| suse-su-2025:03073-1 | Security update for redis | 2025-09-04T08:52:31Z | 2025-09-04T08:52:31Z |
| suse-su-2025:03062-1 | Security update for nvidia-open-driver-G06-signed | 2025-09-03T16:06:54Z | 2025-09-03T16:06:54Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| opensuse-su-2025:14805-1 | postgresql13-13.19-1.1 on GA media | 2025-02-13T00:00:00Z | 2025-02-13T00:00:00Z |
| opensuse-su-2025:14804-1 | kernel-firmware-all-20250206-1.1 on GA media | 2025-02-13T00:00:00Z | 2025-02-13T00:00:00Z |
| opensuse-su-2025:14803-1 | ucode-intel-20250211-1.1 on GA media | 2025-02-12T00:00:00Z | 2025-02-12T00:00:00Z |
| opensuse-su-2025:14802-1 | libopenssl-3-devel-3.2.4-1.1 on GA media | 2025-02-12T00:00:00Z | 2025-02-12T00:00:00Z |
| opensuse-su-2025:14801-1 | kernel-firmware-usb-network-20250206-1.1 on GA media | 2025-02-12T00:00:00Z | 2025-02-12T00:00:00Z |
| opensuse-su-2025:14800-1 | kernel-firmware-ueagle-20250206-1.1 on GA media | 2025-02-12T00:00:00Z | 2025-02-12T00:00:00Z |
| opensuse-su-2025:14799-1 | kernel-firmware-ti-20250206-1.1 on GA media | 2025-02-12T00:00:00Z | 2025-02-12T00:00:00Z |
| opensuse-su-2025:14798-1 | kernel-firmware-sound-20250210-1.1 on GA media | 2025-02-12T00:00:00Z | 2025-02-12T00:00:00Z |
| opensuse-su-2025:14797-1 | kernel-firmware-serial-20250206-1.1 on GA media | 2025-02-12T00:00:00Z | 2025-02-12T00:00:00Z |
| opensuse-su-2025:14796-1 | kernel-firmware-realtek-20250206-1.1 on GA media | 2025-02-12T00:00:00Z | 2025-02-12T00:00:00Z |
| opensuse-su-2025:14795-1 | kernel-firmware-radeon-20250206-1.1 on GA media | 2025-02-12T00:00:00Z | 2025-02-12T00:00:00Z |
| opensuse-su-2025:14794-1 | kernel-firmware-qlogic-20250206-1.1 on GA media | 2025-02-12T00:00:00Z | 2025-02-12T00:00:00Z |
| opensuse-su-2025:14793-1 | kernel-firmware-qcom-20250206-1.1 on GA media | 2025-02-12T00:00:00Z | 2025-02-12T00:00:00Z |
| opensuse-su-2025:14792-1 | kernel-firmware-prestera-20250206-1.1 on GA media | 2025-02-12T00:00:00Z | 2025-02-12T00:00:00Z |
| opensuse-su-2025:14791-1 | kernel-firmware-platform-20250206-1.1 on GA media | 2025-02-12T00:00:00Z | 2025-02-12T00:00:00Z |
| opensuse-su-2025:14790-1 | kernel-firmware-nvidia-20250206-1.1 on GA media | 2025-02-12T00:00:00Z | 2025-02-12T00:00:00Z |
| opensuse-su-2025:14789-1 | kernel-firmware-nfp-20250206-1.1 on GA media | 2025-02-12T00:00:00Z | 2025-02-12T00:00:00Z |
| opensuse-su-2025:14788-1 | kernel-firmware-network-20250206-1.1 on GA media | 2025-02-12T00:00:00Z | 2025-02-12T00:00:00Z |
| opensuse-su-2025:14787-1 | kernel-firmware-mwifiex-20250206-1.1 on GA media | 2025-02-12T00:00:00Z | 2025-02-12T00:00:00Z |
| opensuse-su-2025:14786-1 | kernel-firmware-mellanox-20250206-1.1 on GA media | 2025-02-12T00:00:00Z | 2025-02-12T00:00:00Z |
| opensuse-su-2025:14785-1 | kernel-firmware-mediatek-20250206-1.1 on GA media | 2025-02-12T00:00:00Z | 2025-02-12T00:00:00Z |
| opensuse-su-2025:14784-1 | kernel-firmware-media-20250206-1.1 on GA media | 2025-02-12T00:00:00Z | 2025-02-12T00:00:00Z |
| opensuse-su-2025:14783-1 | kernel-firmware-marvell-20250206-1.1 on GA media | 2025-02-12T00:00:00Z | 2025-02-12T00:00:00Z |
| opensuse-su-2025:14782-1 | kernel-firmware-liquidio-20250206-1.1 on GA media | 2025-02-12T00:00:00Z | 2025-02-12T00:00:00Z |
| opensuse-su-2025:14781-1 | kernel-firmware-iwlwifi-20250206-1.1 on GA media | 2025-02-12T00:00:00Z | 2025-02-12T00:00:00Z |
| opensuse-su-2025:14780-1 | kernel-firmware-intel-20250206-1.1 on GA media | 2025-02-12T00:00:00Z | 2025-02-12T00:00:00Z |
| opensuse-su-2025:14779-1 | kernel-firmware-i915-20250210-1.1 on GA media | 2025-02-12T00:00:00Z | 2025-02-12T00:00:00Z |
| opensuse-su-2025:14778-1 | kernel-firmware-dpaa2-20250206-1.1 on GA media | 2025-02-12T00:00:00Z | 2025-02-12T00:00:00Z |
| opensuse-su-2025:14777-1 | kernel-firmware-chelsio-20250206-1.1 on GA media | 2025-02-12T00:00:00Z | 2025-02-12T00:00:00Z |
| opensuse-su-2025:14776-1 | kernel-firmware-brcm-20250206-1.1 on GA media | 2025-02-12T00:00:00Z | 2025-02-12T00:00:00Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| cnvd-2025-28673 | Intel CIP信息泄露漏洞（CNVD-2025-28673） | 2025-11-14 | 2025-11-17 |
| cnvd-2025-28672 | Intel CIP权限提升漏洞（CNVD-2025-28672） | 2025-11-14 | 2025-11-17 |
| cnvd-2025-28671 | Intel CIP权限提升漏洞 | 2025-11-14 | 2025-11-17 |
| cnvd-2025-28670 | Intel CIP信息泄露漏洞 | 2025-11-14 | 2025-11-17 |
| cnvd-2025-28526 | Dell Command Monitor权限提升漏洞 | 2025-11-10 | 2025-11-17 |
| cnvd-2025-28525 | Dell CloudLink命令注入漏洞 | 2025-11-10 | 2025-11-17 |
| cnvd-2025-28524 | Dell CloudLink操作系统命令注入漏洞 | 2025-11-10 | 2025-11-17 |
| cnvd-2025-28523 | Dell CloudLink命令执行漏洞（CNVD-2025-28523） | 2025-11-10 | 2025-11-17 |
| cnvd-2025-28522 | Dell CloudLink命令执行漏洞（CNVD-2025-28522） | 2025-11-10 | 2025-11-17 |
| cnvd-2025-28521 | Dell CloudLink拒绝服务漏洞 | 2025-11-10 | 2025-11-17 |
| cnvd-2025-28520 | Dell CloudLink命令执行漏洞 | 2025-11-10 | 2025-11-17 |
| cnvd-2025-28519 | Dell CloudLink权限提升漏洞 | 2025-11-10 | 2025-11-17 |
| cnvd-2025-28483 | Intel CIP代码问题漏洞 | 2025-11-14 | 2025-11-17 |
| cnvd-2025-28482 | Intel CIP访问控制不当漏洞 | 2025-11-14 | 2025-11-17 |
| cnvd-2025-28465 | Intel CIP权限提升漏洞 | 2025-11-14 | 2025-11-17 |
| cnvd-2025-28527 | MantisBT授权问题漏洞（CNVD-2025-28527） | 2025-11-10 | 2025-11-14 |
| cnvd-2025-28011 | Simple Online Hotel Reservation System delete_room.php文件SQL注入漏洞 | 2025-06-27 | 2025-11-14 |
| cnvd-2025-28010 | Simple Online Hotel Reservation System delete_pending.php文件SQL注入漏洞 | 2025-06-27 | 2025-11-14 |
| cnvd-2025-28009 | Simple Online Hotel Reservation System confirm_reserve.php文件SQL注入漏洞 | 2025-06-27 | 2025-11-14 |
| cnvd-2025-27985 | Samba操作系统命令注入漏洞 | 2025-10-20 | 2025-11-14 |
| cnvd-2025-27925 | ThinkDashboard跨站脚本漏洞 | 2025-11-11 | 2025-11-14 |
| cnvd-2025-27924 | FoxCMS跨站脚本漏洞 | 2025-11-12 | 2025-11-14 |
| cnvd-2025-27923 | Calibre输入验证错误漏洞（CNVD-2025-27923） | 2025-11-12 | 2025-11-14 |
| cnvd-2025-27911 | Simple Online Hotel Reservation System checkout_query.php文件SQL注入漏洞 | 2025-06-27 | 2025-11-14 |
| cnvd-2025-27910 | Simple Online Hotel Reservation System add_room.php文件SQL注入漏洞 | 2025-06-27 | 2025-11-14 |
| cnvd-2025-27909 | Simple Online Hotel Reservation System add_reserve.php文件SQL注入漏洞 | 2025-06-27 | 2025-11-14 |
| cnvd-2025-27908 | Simple Online Hotel Reservation System add_account.php文件SQL注入漏洞 | 2025-06-27 | 2025-11-14 |
| cnvd-2025-27907 | Simple Online Hotel Reservation System delete_account.php文件SQL注入漏洞 | 2025-06-27 | 2025-11-14 |
| cnvd-2025-27906 | Simple Online Hotel Reservation System跨站脚本漏洞 | 2025-10-15 | 2025-11-14 |
| cnvd-2025-27905 | Tenda AC23 Compare_parentcontrol_time函数栈缓冲区溢出漏洞 | 2023-08-29 | 2025-11-14 |
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2025-avi-0565 | Multiples vulnérabilités dans les produits Schneider Electric | 2025-07-08T00:00:00.000000 | 2025-07-08T00:00:00.000000 |
| certfr-2025-avi-0564 | Multiples vulnérabilités dans les produits SAP | 2025-07-08T00:00:00.000000 | 2025-07-08T00:00:00.000000 |
| certfr-2025-avi-0563 | Multiples vulnérabilités dans les produits Splunk | 2025-07-08T00:00:00.000000 | 2025-07-08T00:00:00.000000 |
| CERTFR-2025-AVI-0566 | Multiples vulnérabilités dans les produits Siemens | 2025-07-08T00:00:00.000000 | 2025-07-08T00:00:00.000000 |
| CERTFR-2025-AVI-0565 | Multiples vulnérabilités dans les produits Schneider Electric | 2025-07-08T00:00:00.000000 | 2025-07-08T00:00:00.000000 |
| CERTFR-2025-AVI-0564 | Multiples vulnérabilités dans les produits SAP | 2025-07-08T00:00:00.000000 | 2025-07-08T00:00:00.000000 |
| CERTFR-2025-AVI-0563 | Multiples vulnérabilités dans les produits Splunk | 2025-07-08T00:00:00.000000 | 2025-07-08T00:00:00.000000 |
| certfr-2025-avi-0562 | Multiples vulnérabilités dans les produits IBM | 2025-07-04T00:00:00.000000 | 2025-07-04T00:00:00.000000 |
| certfr-2025-avi-0561 | Multiples vulnérabilités dans le noyau Linux de Red Hat | 2025-07-04T00:00:00.000000 | 2025-07-04T00:00:00.000000 |
| certfr-2025-avi-0560 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2025-07-04T00:00:00.000000 | 2025-07-04T00:00:00.000000 |
| certfr-2025-avi-0559 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2025-07-04T00:00:00.000000 | 2025-07-04T00:00:00.000000 |
| certfr-2025-avi-0558 | Multiples vulnérabilités dans PHP | 2025-07-04T00:00:00.000000 | 2025-07-04T00:00:00.000000 |
| CERTFR-2025-AVI-0562 | Multiples vulnérabilités dans les produits IBM | 2025-07-04T00:00:00.000000 | 2025-07-04T00:00:00.000000 |
| CERTFR-2025-AVI-0561 | Multiples vulnérabilités dans le noyau Linux de Red Hat | 2025-07-04T00:00:00.000000 | 2025-07-04T00:00:00.000000 |
| CERTFR-2025-AVI-0560 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2025-07-04T00:00:00.000000 | 2025-07-04T00:00:00.000000 |
| CERTFR-2025-AVI-0559 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2025-07-04T00:00:00.000000 | 2025-07-04T00:00:00.000000 |
| CERTFR-2025-AVI-0558 | Multiples vulnérabilités dans PHP | 2025-07-04T00:00:00.000000 | 2025-07-04T00:00:00.000000 |
| certfr-2025-avi-0557 | Vulnérabilité dans Microsoft Edge | 2025-07-03T00:00:00.000000 | 2025-07-03T00:00:00.000000 |
| certfr-2025-avi-0556 | Vulnérabilité dans Citrix XenServer | 2025-07-03T00:00:00.000000 | 2025-07-03T00:00:00.000000 |
| certfr-2025-avi-0555 | Multiples vulnérabilités dans Mozilla Thunderbird | 2025-07-03T00:00:00.000000 | 2025-07-03T00:00:00.000000 |
| certfr-2025-avi-0554 | Multiples vulnérabilités dans Grafana | 2025-07-03T00:00:00.000000 | 2025-07-03T00:00:00.000000 |
| certfr-2025-avi-0553 | Vulnérabilité dans les produits Cisco | 2025-07-03T00:00:00.000000 | 2025-07-03T00:00:00.000000 |
| CERTFR-2025-AVI-0557 | Vulnérabilité dans Microsoft Edge | 2025-07-03T00:00:00.000000 | 2025-07-03T00:00:00.000000 |
| CERTFR-2025-AVI-0556 | Vulnérabilité dans Citrix XenServer | 2025-07-03T00:00:00.000000 | 2025-07-03T00:00:00.000000 |
| CERTFR-2025-AVI-0555 | Multiples vulnérabilités dans Mozilla Thunderbird | 2025-07-03T00:00:00.000000 | 2025-07-03T00:00:00.000000 |
| CERTFR-2025-AVI-0554 | Multiples vulnérabilités dans Grafana | 2025-07-03T00:00:00.000000 | 2025-07-03T00:00:00.000000 |
| CERTFR-2025-AVI-0553 | Vulnérabilité dans les produits Cisco | 2025-07-03T00:00:00.000000 | 2025-07-03T00:00:00.000000 |
| certfr-2025-avi-0552 | Multiples vulnérabilités dans Microsoft Edge | 2025-07-02T00:00:00.000000 | 2025-07-02T00:00:00.000000 |
| certfr-2025-avi-0551 | Vulnérabilité dans Xen | 2025-07-02T00:00:00.000000 | 2025-07-02T00:00:00.000000 |
| CERTFR-2025-AVI-0552 | Multiples vulnérabilités dans Microsoft Edge | 2025-07-02T00:00:00.000000 | 2025-07-02T00:00:00.000000 |