Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2025-68940 |
3.1 (3.1)
|
In Gitea before 1.22.5, branch deletion permissio… |
Gitea |
Gitea |
2025-12-26T02:14:52.076Z | 2025-12-26T18:57:56.965Z |
| CVE-2025-68939 |
8.2 (3.1)
|
Gitea before 1.23.0 allows attackers to add attac… |
Gitea |
Gitea |
2025-12-26T02:03:59.691Z | 2025-12-26T18:57:27.065Z |
| CVE-2025-68938 |
4.3 (3.1)
|
Gitea before 1.25.2 mishandles authorization for … |
Gitea |
Gitea |
2025-12-26T01:19:10.609Z | 2025-12-26T18:53:35.494Z |
| CVE-2024-44065 |
9.8 (3.1)
|
Time-based blind SQL Injection vulnerability in C… |
n/a |
n/a |
2025-12-26T00:00:00.000Z | 2025-12-26T18:35:58.415Z |
| CVE-2025-24148 |
5.5 (3.1)
|
This issue was addressed with improved handling o… |
Apple |
macOS |
2025-03-31T22:22:20.776Z | 2025-12-26T16:48:50.913Z |
| CVE-2025-43296 |
5.5 (3.1)
|
A logic issue was addressed with improved validat… |
Apple |
macOS |
2025-10-09T20:50:48.673Z | 2025-12-26T16:44:12.881Z |
| CVE-2025-43348 |
5.5 (3.1)
|
A logic issue was addressed with improved validat… |
Apple |
macOS |
2025-11-04T01:17:30.602Z | 2025-12-26T16:42:24.746Z |
| CVE-2025-46291 |
5.5 (3.1)
|
A logic issue was addressed with improved validat… |
Apple |
macOS |
2025-12-17T20:47:01.439Z | 2025-12-26T16:41:07.010Z |
| CVE-2025-15082 |
6.9 (4.0)
5.3 (3.1)
5.3 (3.0)
|
TOZED ZLT M30s Web Management proc_post information di… |
TOZED |
ZLT M30s |
2025-12-25T17:02:09.345Z | 2025-12-26T16:37:54.066Z |
| CVE-2025-15081 |
5.3 (4.0)
6.3 (3.1)
6.3 (3.0)
|
JD Cloud BE6500 jdcapi sub_4780 command injection |
JD |
Cloud BE6500 |
2025-12-25T15:02:06.546Z | 2025-12-26T16:37:10.227Z |
| CVE-2025-2405 |
7.6 (3.1)
|
XSS in Verisay Communication's Titarus |
Verisay Communication and Information Technology Industry and Trade Ltd. Co. |
Titarus |
2025-12-25T13:10:25.121Z | 2025-12-26T16:36:33.283Z |
| CVE-2025-15073 |
6.9 (4.0)
7.3 (3.1)
7.3 (3.0)
|
itsourcecode Online Frozen Foods Ordering System conta… |
itsourcecode |
Online Frozen Foods Ordering System |
2025-12-24T23:02:07.917Z | 2025-12-26T16:35:30.166Z |
| CVE-2025-15074 |
6.9 (4.0)
7.3 (3.1)
7.3 (3.0)
|
itsourcecode Online Frozen Foods Ordering System custo… |
itsourcecode |
Online Frozen Foods Ordering System |
2025-12-25T02:32:06.261Z | 2025-12-26T16:34:54.287Z |
| CVE-2025-15075 |
6.9 (4.0)
7.3 (3.1)
7.3 (3.0)
|
itsourcecode Student Management System student_p.php s… |
itsourcecode |
Student Management System |
2025-12-25T03:02:06.320Z | 2025-12-26T16:34:21.922Z |
| CVE-2025-15076 |
6.9 (4.0)
7.3 (3.1)
7.3 (3.0)
|
Tenda CH22 public path traversal |
Tenda |
CH22 |
2025-12-25T03:32:06.775Z | 2025-12-26T16:33:52.331Z |
| CVE-2025-65885 |
5.1 (3.1)
|
An issue was discovered in the Delight Custom Fir… |
n/a |
n/a |
2025-12-26T00:00:00.000Z | 2025-12-26T16:33:11.632Z |
| CVE-2025-67349 |
6.1 (3.1)
|
A cross-site scripting (XSS) vulnerability was id… |
n/a |
n/a |
2025-12-26T00:00:00.000Z | 2025-12-26T16:31:58.460Z |
| CVE-2025-66947 |
6.5 (3.1)
|
SQL injection vulnerability in krishanmuraiji SMS… |
n/a |
n/a |
2025-12-26T00:00:00.000Z | 2025-12-26T16:31:09.014Z |
| CVE-2025-25341 |
7.5 (3.1)
|
A vulnerability exists in the libxmljs 1.0.11 whe… |
n/a |
n/a |
2025-12-26T00:00:00.000Z | 2025-12-26T16:30:16.444Z |
| CVE-2025-67013 |
6.5 (3.1)
|
The web management interface in ETL Systems Ltd D… |
n/a |
n/a |
2025-12-26T00:00:00.000Z | 2025-12-26T16:29:15.819Z |
| CVE-2025-67015 |
7.5 (3.1)
|
Incorrect access control in Comtech EF Data CDM-6… |
n/a |
n/a |
2025-12-26T00:00:00.000Z | 2025-12-26T16:28:22.470Z |
| CVE-2025-67014 |
7.5 (3.1)
|
Incorrect access control in DEV Systemtechnik Gmb… |
n/a |
n/a |
2025-12-26T00:00:00.000Z | 2025-12-26T16:27:17.841Z |
| CVE-2024-29720 |
6.2 (3.1)
|
An issue in Terra Informatica Software, Inc Scite… |
n/a |
n/a |
2025-12-26T00:00:00.000Z | 2025-12-26T16:26:04.772Z |
| CVE-2025-14935 |
7.8 (3.0)
|
NSF Unidata NetCDF-C Dimension Name Heap-based Buffer … |
NSF Unidata |
NetCDF-C |
2025-12-23T21:08:45.207Z | 2025-12-26T16:10:30.154Z |
| CVE-2025-14936 |
7.8 (3.0)
|
NSF Unidata NetCDF-C Attribute Name Stack-based Buffer… |
NSF Unidata |
NetCDF-C |
2025-12-23T21:08:40.465Z | 2025-12-26T16:09:47.995Z |
| CVE-2025-14925 |
7.8 (3.0)
|
Hugging Face Accelerate Deserialization of Untrusted D… |
Hugging Face |
Accelerate |
2025-12-23T21:05:07.497Z | 2025-12-26T16:09:09.026Z |
| CVE-2025-14922 |
7.8 (3.0)
|
Hugging Face Diffusers CogView4 Deserialization of Unt… |
Hugging Face |
Diffusers |
2025-12-23T21:05:03.128Z | 2025-12-26T16:08:35.997Z |
| CVE-2025-8075 |
5.8 (4.0)
|
Improper Input Validation |
Hanwha Vision Co., Ltd. |
QNV-C8012 |
2025-12-26T04:31:38.718Z | 2025-12-26T16:01:16.611Z |
| CVE-2025-59887 |
8.6 (3.1)
|
Improper authentication of library files in the E… |
Eaton |
Eaton UPS Companion Software |
2025-12-26T06:48:08.086Z | 2025-12-26T15:45:28.715Z |
| CVE-2025-59888 |
6.7 (3.1)
|
Improper quotation in search paths in the Eaton U… |
Eaton |
UPS Companion software |
2025-12-26T06:53:33.887Z | 2025-12-26T15:37:43.044Z |
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2025-15074 |
6.9 (4.0)
7.3 (3.1)
7.3 (3.0)
|
itsourcecode Online Frozen Foods Ordering System custo… |
itsourcecode |
Online Frozen Foods Ordering System |
2025-12-25T02:32:06.261Z | 2025-12-26T16:34:54.287Z |
| CVE-2025-15186 |
6.9 (4.0)
7.3 (3.1)
7.3 (3.0)
|
code-projects Refugee Food Management System addusers.… |
code-projects |
Refugee Food Management System |
2025-12-29T11:32:06.009Z | 2025-12-29T13:17:51.214Z |
| CVE-2025-15185 |
6.9 (4.0)
7.3 (3.1)
7.3 (3.0)
|
code-projects Refugee Food Management System refugeesr… |
code-projects |
Refugee Food Management System |
2025-12-29T11:02:07.163Z | 2025-12-29T13:24:46.871Z |
| CVE-2025-15184 |
6.9 (4.0)
7.3 (3.1)
7.3 (3.0)
|
code-projects Refugee Food Management System refugeesr… |
code-projects |
Refugee Food Management System |
2025-12-29T10:32:08.687Z | 2025-12-29T13:30:04.962Z |
| CVE-2025-15183 |
6.9 (4.0)
7.3 (3.1)
7.3 (3.0)
|
code-projects Refugee Food Management System viewtaken… |
code-projects |
Refugee Food Management System |
2025-12-29T10:02:07.718Z | 2025-12-29T13:52:13.840Z |
| CVE-2025-15182 |
6.9 (4.0)
7.3 (3.1)
7.3 (3.0)
|
code-projects Refugee Food Management System served.ph… |
code-projects |
Refugee Food Management System |
2025-12-29T09:32:11.171Z | 2025-12-29T16:41:01.231Z |
| CVE-2025-15181 |
6.9 (4.0)
7.3 (3.1)
7.3 (3.0)
|
code-projects Refugee Food Management System pagenateR… |
code-projects |
Refugee Food Management System |
2025-12-29T09:02:05.761Z | 2025-12-29T16:41:40.624Z |
| CVE-2025-15193 |
8.7 (4.0)
8.8 (3.1)
8.8 (3.0)
|
D-Link DWR-M920 formParentControl sub_423848 buffer overflow |
D-Link |
DWR-M920 |
2025-12-29T15:02:08.698Z | 2025-12-29T16:10:51.648Z |
| CVE-2025-15192 |
5.3 (4.0)
6.3 (3.1)
6.3 (3.0)
|
D-Link DWR-M920 formLtefotaUpgradeQuectel sub_415328 c… |
D-Link |
DWR-M920 |
2025-12-29T14:32:08.392Z | 2025-12-29T16:11:38.000Z |
| CVE-2025-15191 |
5.3 (4.0)
6.3 (3.1)
6.3 (3.0)
|
D-Link DWR-M920 formLtefotaUpgradeFibocom sub_4155B4 c… |
D-Link |
DWR-M920 |
2025-12-29T14:02:07.207Z | 2025-12-29T14:26:08.160Z |
| CVE-2025-15190 |
8.7 (4.0)
8.8 (3.1)
8.8 (3.0)
|
D-Link DWR-M920 formFilter sub_42261C stack-based overflow |
D-Link |
DWR-M920 |
2025-12-29T13:32:08.616Z | 2025-12-29T14:26:52.164Z |
| CVE-2025-15189 |
8.7 (4.0)
8.8 (3.1)
8.8 (3.0)
|
D-Link DWR-M920 formDefRoute sub_464794 buffer overflow |
D-Link |
DWR-M920 |
2025-12-29T13:02:11.742Z | 2025-12-29T13:15:00.973Z |
| CVE-2025-36154 |
6.2 (3.1)
|
IBM Concert Software Cleartext Storage in a File or on Disk. |
IBM |
Concert |
2025-12-24T19:01:48.161Z | 2025-12-24T20:02:34.098Z |
| CVE-2025-15143 |
5.1 (4.0)
4.7 (3.1)
4.7 (3.0)
|
EyouCMS Backend Template Management FilemanagerLogic.p… |
n/a |
EyouCMS |
2025-12-28T16:02:08.347Z | 2025-12-29T16:24:22.854Z |
| CVE-2020-36902 |
9.3 (4.0)
|
UBICOD Medivision Digital Signage 1.5.1 Authorization … |
UBICOD Co., Ltd. | MEDIVISION INC. |
UBICOD Medivision Digital Signage |
2025-12-10T21:05:41.753Z | 2025-12-11T18:52:29.859Z |
| CVE-2025-67809 |
4.7 (3.1)
|
An issue was discovered in Zimbra Collaboration (… |
n/a |
n/a |
2025-12-15T00:00:00.000Z | 2025-12-15T20:17:26.355Z |
| CVE-2020-36901 |
8.6 (4.0)
|
UBICOD Medivision Digital Signage 1.5.1 Cross-Site Req… |
UBICOD Co., Ltd. | MEDIVISION INC. |
UBICOD Medivision Digital Signage |
2025-12-10T21:05:21.945Z | 2025-12-11T18:52:35.866Z |
| CVE-2025-55703 |
2.5 (3.1)
|
An error-based SQL injection vulnerability exists… |
n/a |
n/a |
2025-12-15T00:00:00.000Z | 2025-12-15T20:08:08.419Z |
| CVE-2019-25243 |
8.7 (4.0)
8.8 (3.1)
|
FaceSentry 6.4.8 Authenticated Remote Command Injectio… |
iWT Ltd. |
FaceSentry Access Control System |
2025-12-24T19:27:58.965Z | 2025-12-24T20:23:05.664Z |
| CVE-2025-66587 |
N/A
|
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | N/A | N/A | 2025-12-11T20:53:08.409Z | 2025-12-30T19:53:41.641Z |
| CVE-2025-66584 |
N/A
|
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | N/A | N/A | 2025-12-11T20:58:53.846Z | 2025-12-30T19:53:19.816Z |
| CVE-2019-25242 |
5.1 (4.0)
4.3 (3.1)
|
FaceSentry Access Control System 6.4.8 Cross-Site Requ… |
iWT Ltd. |
FaceSentry Access Control System |
2025-12-24T19:27:58.523Z | 2025-12-24T20:23:12.300Z |
| CVE-2025-14860 |
9.8 (3.1)
|
Use-after-free in the Disability Access APIs component |
Mozilla |
Firefox |
2025-12-18T14:21:13.483Z | 2025-12-19T20:35:53.096Z |
| CVE-2025-14861 |
8.8 (3.1)
|
Memory safety bugs fixed in Firefox 146.0.1 |
Mozilla |
Firefox |
2025-12-18T14:21:14.680Z | 2025-12-20T04:56:38.874Z |
| CVE-2025-63757 |
7.5 (3.1)
|
Integer overflow vulnerability in the yuv2ya16_X_… |
n/a |
n/a |
2025-12-18T00:00:00.000Z | 2025-12-18T19:31:22.092Z |
| CVE-2025-63386 |
9.1 (3.1)
|
A Cross-Origin Resource Sharing (CORS) misconfigu… |
n/a |
n/a |
2025-12-18T00:00:00.000Z | 2025-12-19T21:24:32.281Z |
| CVE-2025-63388 |
9.1 (3.1)
|
A Cross-Origin Resource Sharing (CORS) misconfigu… |
n/a |
n/a |
2025-12-18T00:00:00.000Z | 2025-12-19T21:29:11.310Z |
| CVE-2025-63389 |
9.8 (3.1)
|
A critical authentication bypass vulnerability ex… |
n/a |
n/a |
2025-12-18T00:00:00.000Z | 2025-12-19T18:02:03.129Z |
| CVE-2025-63390 |
5.3 (3.1)
|
An authentication bypass vulnerability exists in … |
n/a |
n/a |
2025-12-18T00:00:00.000Z | 2025-12-19T21:27:10.654Z |
| CVE-2025-63391 |
7.5 (3.1)
|
An authentication bypass vulnerability exists in … |
n/a |
n/a |
2025-12-18T00:00:00.000Z | 2025-12-18T17:51:07.483Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| fkie_cve-2024-58312 | xbtitFM 4.1.18 contains a path traversal vulnerability that allows unauthenticated attackers to acc… | 2025-12-11T22:15:52.790 | 2025-12-30T19:51:08.650 |
| fkie_cve-2024-58309 | xbtitFM 4.1.18 contains an unauthenticated SQL injection vulnerability that allows remote attackers… | 2025-12-11T22:15:52.487 | 2025-12-30T19:50:50.680 |
| fkie_cve-2025-14709 | A security vulnerability has been detected in Shiguangwu sgwbox N3 2.0.25. Affected by this issue i… | 2025-12-15T07:15:51.520 | 2025-12-30T19:45:54.163 |
| fkie_cve-2025-63387 | Dify v1.9.1 is vulnerable to Insecure Permissions. An unauthenticated attacker can directly send HT… | 2025-12-18T19:16:33.157 | 2025-12-30T19:39:12.797 |
| fkie_cve-2023-44475 | Cross-Site Request Forgery (CSRF) vulnerability in Michael Simpson Add Shortcodes Actions And Filte… | 2023-10-10T15:15:10.320 | 2025-12-30T19:38:28.437 |
| fkie_cve-2025-15048 | A vulnerability was determined in Tenda WH450 1.0.0.18. This impacts an unknown function of the fil… | 2025-12-23T23:15:44.167 | 2025-12-30T19:29:50.420 |
| fkie_cve-2025-15047 | A vulnerability was found in Tenda WH450 1.0.0.18. This affects an unknown function of the file /go… | 2025-12-23T22:15:51.860 | 2025-12-30T19:29:29.563 |
| fkie_cve-2025-15046 | A vulnerability has been found in Tenda WH450 1.0.0.18. The impacted element is an unknown function… | 2025-12-23T22:15:51.677 | 2025-12-30T19:29:13.577 |
| fkie_cve-2025-15045 | A flaw has been found in Tenda WH450 1.0.0.18. The affected element is an unknown function of the f… | 2025-12-23T21:15:49.510 | 2025-12-30T19:28:44.343 |
| fkie_cve-2025-65754 | Cross Site Scripting vulnerability in Algernon v1.17.4 allows attackers to execute arbitrary code v… | 2025-12-10T18:16:21.090 | 2025-12-30T19:28:13.963 |
| fkie_cve-2025-15044 | A vulnerability was detected in Tenda WH450 1.0.0.18. Impacted is an unknown function of the file /… | 2025-12-23T21:15:49.320 | 2025-12-30T19:22:48.150 |
| fkie_cve-2024-24130 | Mail2World v12 Business Control Center was discovered to contain a reflected cross-site scripting (… | 2024-02-07T14:15:52.720 | 2025-12-30T19:20:49.010 |
| fkie_cve-2023-40263 | An issue was discovered in Atos Unify OpenScape Voice Trace Manager V8 before V8 R0.9.11. It allows… | 2024-02-08T23:15:09.730 | 2025-12-30T19:20:32.783 |
| fkie_cve-2023-40264 | An issue was discovered in Atos Unify OpenScape Voice Trace Manager V8 before V8 R0.9.11. It allows… | 2024-02-08T23:15:09.773 | 2025-12-30T19:20:25.843 |
| fkie_cve-2023-40262 | An issue was discovered in Atos Unify OpenScape Voice Trace Manager V8 before V8 R0.9.11. It allows… | 2024-02-08T23:15:09.683 | 2025-12-30T19:19:01.840 |
| fkie_cve-2025-15076 | A weakness has been identified in Tenda CH22 1.0.0.1. Impacted is an unknown function of the file /… | 2025-12-25T04:15:43.287 | 2025-12-30T19:17:13.593 |
| fkie_cve-2025-65825 | The firmware on the basestation of the Meatmeet is not encrypted. An adversary with physical access… | 2025-12-10T21:16:08.250 | 2025-12-30T19:15:39.657 |
| fkie_cve-2025-65826 | The mobile application was found to contain stored credentials for the network it was developed on.… | 2025-12-10T21:16:08.360 | 2025-12-30T19:14:23.113 |
| fkie_cve-2025-15126 | A weakness has been identified in JeecgBoot up to 3.9.0. Affected by this vulnerability is the func… | 2025-12-28T08:15:45.293 | 2025-12-30T19:13:59.300 |
| fkie_cve-2025-65827 | The mobile application is configured to allow clear text traffic to all domains and communicates wi… | 2025-12-10T21:16:08.473 | 2025-12-30T19:09:32.150 |
| fkie_cve-2025-15120 | A flaw has been found in JeecgBoot up to 3.9.0. Impacted is the function getDeptRoleList of the fil… | 2025-12-28T05:15:56.397 | 2025-12-30T19:07:13.433 |
| fkie_cve-2025-15121 | A vulnerability has been found in JeecgBoot up to 3.9.0. The affected element is the function getDe… | 2025-12-28T05:16:04.230 | 2025-12-30T19:06:19.340 |
| fkie_cve-2025-15122 | A vulnerability was found in JeecgBoot up to 3.9.0. The impacted element is the function loadDataru… | 2025-12-28T05:16:05.200 | 2025-12-30T19:05:48.203 |
| fkie_cve-2025-15123 | A vulnerability was determined in JeecgBoot up to 3.9.0. This affects an unknown function of the fi… | 2025-12-28T07:15:52.113 | 2025-12-30T19:05:39.650 |
| fkie_cve-2025-15124 | A vulnerability was identified in JeecgBoot up to 3.9.0. This impacts the function getParameterMap … | 2025-12-28T07:15:53.350 | 2025-12-30T19:05:30.440 |
| fkie_cve-2025-15125 | A security flaw has been discovered in JeecgBoot up to 3.9.0. Affected is the function queryDepartP… | 2025-12-28T07:15:53.540 | 2025-12-30T19:04:05.500 |
| fkie_cve-2025-15154 | A security vulnerability has been detected in PbootCMS up to 3.2.12. The affected element is the fu… | 2025-12-28T21:15:54.907 | 2025-12-30T19:02:50.287 |
| fkie_cve-2025-15153 | A weakness has been identified in PbootCMS up to 3.2.12. Impacted is an unknown function of the fil… | 2025-12-28T21:15:54.107 | 2025-12-30T19:01:36.847 |
| fkie_cve-2025-65828 | An unauthenticated attacker within proximity of the Meatmeet device can issue several commands over… | 2025-12-10T21:16:08.577 | 2025-12-30T19:01:09.157 |
| fkie_cve-2025-65829 | The ESP32 system on a chip (SoC) that powers the Meatmeet basestation device was found to lack Secu… | 2025-12-10T21:16:08.690 | 2025-12-30T18:56:15.947 |
| ID | Severity | Description | Published | Updated |
|---|---|---|---|---|
| ghsa-c68w-pf33-46g8 |
7.5 (3.1)
8.7 (4.0)
|
FLIR AX8 Thermal Camera 1.32.16 contains an unauthenticated vulnerability that allows remote attack… | 2025-12-24T21:30:31Z | 2025-12-24T21:30:31Z |
| ghsa-8j6v-82x4-pg34 |
7.5 (3.1)
9.3 (4.0)
|
FLIR AX8 Thermal Camera 1.32.16 contains hard-coded SSH and web panel credentials that cannot be ch… | 2025-12-24T21:30:31Z | 2025-12-24T21:30:31Z |
| ghsa-8hvh-73q5-g7pg |
7.5 (3.1)
8.7 (4.0)
|
FLIR Brickstream 3D+ 2.1.742.1842 contains an unauthenticated vulnerability in the ExportConfig RES… | 2025-12-24T21:30:31Z | 2025-12-24T21:30:31Z |
| ghsa-58r7-rx7j-5v4g |
9.8 (3.1)
9.3 (4.0)
|
Anviz AIM CrossChex Standard 4.3.6.0 contains a CSV injection vulnerability that allows attackers t… | 2025-12-24T21:30:31Z | 2025-12-24T21:30:31Z |
| ghsa-x4fw-5929-5227 |
7.2 (3.1)
5.1 (4.0)
|
Leica Geosystems GR10/GR25/GR30/GR50 GNSS 4.30.063 contains a stored cross-site scripting vulnerabi… | 2025-12-24T21:30:30Z | 2025-12-24T21:30:30Z |
| ghsa-wx69-963x-88g9 |
5.4 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-12-24T15:30:43Z | 2025-12-24T21:30:30Z |
| ghsa-wcqx-pwqh-x4mj |
7.5 (3.1)
7.1 (4.0)
|
SOCA Access Control System 180612 contains multiple insecure direct object reference vulnerabilitie… | 2025-12-24T21:30:30Z | 2025-12-24T21:30:30Z |
| ghsa-w77q-cf84-7mcq |
8.8 (3.1)
|
Missing Authorization vulnerability in Trustindex Widgets for Social Photo Feed social-photo-feed-w… | 2025-12-24T15:30:43Z | 2025-12-24T21:30:30Z |
| ghsa-vvm7-2r5j-f59p |
5.4 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-12-24T15:30:43Z | 2025-12-24T21:30:30Z |
| ghsa-r8pj-6rqm-3whh |
6.2 (3.1)
|
IBM Concert 1.0.0 through 2.1.0 stores sensitive information in cleartext during recursive docker b… | 2025-12-24T21:30:30Z | 2025-12-24T21:30:30Z |
| ghsa-r7mr-v7hp-8j95 |
8.8 (3.1)
|
Cross-Site Request Forgery (CSRF) vulnerability in Rustaurius Five Star Restaurant Reservations res… | 2025-12-24T15:30:43Z | 2025-12-24T21:30:30Z |
| ghsa-m662-6p96-4253 |
5.3 (3.1)
5.1 (4.0)
|
SOCA Access Control System 180612 contains a cross-site request forgery vulnerability that allows a… | 2025-12-24T21:30:30Z | 2025-12-24T21:30:30Z |
| ghsa-j564-h633-q5h9 |
8.8 (3.1)
|
Missing Authorization vulnerability in DeluxeThemes Userpro userpro allows Exploiting Incorrectly C… | 2025-12-24T15:30:43Z | 2025-12-24T21:30:30Z |
| ghsa-hjwr-h73m-h7pf |
6.2 (3.1)
6.8 (4.0)
|
Beward Intercom 2.3.1 contains a credentials disclosure vulnerability that allows local attackers t… | 2025-12-24T21:30:30Z | 2025-12-24T21:30:30Z |
| ghsa-cwfr-r8vc-gxjq |
9.1 (3.1)
|
Server-Side Request Forgery (SSRF) vulnerability in Yannick Lefebvre Link Library link-library allo… | 2025-12-24T15:30:43Z | 2025-12-24T21:30:30Z |
| ghsa-754f-6hrq-f5qh |
8.2 (3.1)
9.3 (4.0)
|
SOCA Access Control System 180612 contains multiple SQL injection vulnerabilities that allow attack… | 2025-12-24T21:30:30Z | 2025-12-24T21:30:30Z |
| ghsa-6c9v-4pr2-2r8c |
5.4 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-12-24T15:30:43Z | 2025-12-24T21:30:30Z |
| ghsa-5cxq-j2m3-3vhj |
8.8 (3.1)
|
Missing Authorization vulnerability in Bit Apps Bit Assist bit-assist allows Exploiting Incorrectly… | 2025-12-24T15:30:43Z | 2025-12-24T21:30:30Z |
| ghsa-4p9f-jg9c-8pg6 |
8.1 (3.1)
|
Missing Authorization vulnerability in Marketing Fire Editorial Calendar editorial-calendar allows … | 2025-12-24T15:30:43Z | 2025-12-24T21:30:30Z |
| ghsa-36q5-9xfc-m5q6 |
5.4 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-12-24T15:30:43Z | 2025-12-24T21:30:30Z |
| ghsa-2h6j-3v9m-2v47 |
6.1 (3.1)
|
URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Scott Paterson Accept Donation… | 2025-12-24T15:30:43Z | 2025-12-24T21:30:30Z |
| ghsa-24q7-r72h-hcm2 |
7.5 (3.1)
|
Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in WPXPO P… | 2025-12-24T15:30:43Z | 2025-12-24T21:30:30Z |
| ghsa-xv67-vhc4-3v47 |
9.8 (3.1)
|
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability … | 2025-12-24T15:30:42Z | 2025-12-24T21:30:29Z |
| ghsa-xj42-657g-8r4w |
8.1 (3.1)
|
Missing Authorization vulnerability in Bob Watu Quiz watu allows Exploiting Incorrectly Configured … | 2025-12-24T15:30:42Z | 2025-12-24T21:30:29Z |
| ghsa-xf2c-7wv8-r3w2 |
8.8 (3.1)
|
Missing Authorization vulnerability in Spider Themes BBP Core bbp-core allows Exploiting Incorrectl… | 2025-12-24T15:30:42Z | 2025-12-24T21:30:29Z |
| ghsa-xccw-jx23-7862 |
8.8 (3.1)
|
Missing Authorization vulnerability in Gora Tech Cooked cooked allows Exploiting Incorrectly Config… | 2025-12-24T15:30:42Z | 2025-12-24T21:30:29Z |
| ghsa-x3pg-6rrq-fcp9 |
8.1 (3.1)
|
Missing Authorization vulnerability in WP Socio WP Telegram Widget and Join Link wptelegram-widget … | 2025-12-24T15:30:43Z | 2025-12-24T21:30:29Z |
| ghsa-wvpq-qg53-mq6p |
9.8 (3.1)
|
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability … | 2025-12-24T15:30:42Z | 2025-12-24T21:30:29Z |
| ghsa-vw6w-8q8m-r52p |
8.8 (3.1)
|
Missing Authorization vulnerability in Ben Balter WP Document Revisions wp-document-revisions allow… | 2025-12-24T15:30:42Z | 2025-12-24T21:30:29Z |
| ghsa-vpgr-c763-cmc3 |
8.8 (3.1)
|
Missing Authorization vulnerability in Wappointment team Wappointment wappointment allows Exploitin… | 2025-12-24T15:30:42Z | 2025-12-24T21:30:29Z |
| ID | Severity | Description | Package | Published | Updated |
|---|---|---|---|---|---|
| pysec-2022-235 |
|
WebInterface in OctoBot before 0.4.4 allows remote code execution because Tentacles uploa… | octobot | 2022-07-16T17:15:00Z | 2022-07-21T08:44:55.990435Z |
| pysec-2022-226 |
|
The package whoogle-search before 0.7.2 are vulnerable to Cross-site Scripting (XSS) via … | whoogle-search | 2022-07-12T15:15:00Z | 2022-07-14T05:11:54.875994Z |
| pysec-2022-222 |
|
The Security Team noticed that the termination condition of the for loop in the readExter… | systemds | 2022-06-27T18:15:00Z | 2022-07-14T05:11:54.728743Z |
| pysec-2022-224 |
|
Synapse is an open source home server implementation for the Matrix chat network. In vers… | matrix-synapse | 2022-06-28T17:15:00Z | 2022-07-14T05:11:53.027228Z |
| pysec-2022-225 |
|
The ganga-devs/ganga repository before 8.5.10 on GitHub allows absolute path traversal be… | ganga | 2022-07-11T01:15:00Z | 2022-07-14T05:11:52.325698Z |
| pysec-2022-223 |
|
mat2 (aka metadata anonymisation toolkit) before 0.13.0 allows ../ directory traversal du… | mat2 | 2022-07-08T18:15:00Z | 2022-07-14T05:11:52.948988Z |
| pysec-2021-871 |
|
An issue was discovered in the Dask distributed package before 2021.10.0 for Python. Sing… | distributed | 2021-10-26T11:15:00Z | 2022-07-14T05:11:51.739830Z |
| pysec-2022-221 |
|
The Catly-Translate package in PyPI v0.0.3 to v0.0.5 was discovered to contain a code exe… | catly-translate | 2022-06-24T21:15:00Z | 2022-07-06T20:32:04.087337Z |
| pysec-2022-43168 |
9.8 (3.1)
|
The Sixfab-Tool in PyPI v0.0.2 to v0.0.3 was discovered to contain a code execution backd… | sixfab-tool | 2022-06-24T21:15:00Z | 2022-07-06T19:30:00Z |
| pysec-2022-220 |
|
** Reserved ** The pyesasky for python, as distributed on PyPI, included a code-execution… | pyesasky | 2022-06-24T21:15:00Z | 2022-07-06T18:41:16.470294Z |
| pysec-2022-217 |
|
The cryptoasset-data-downloader package in PyPI v1.0.0 to v1.0.1 was discovered to contai… | cryptoasset-data-downloader | 2022-06-24T21:15:00Z | 2022-07-05T22:30:15.999007Z |
| pysec-2022-219 |
|
The RootInteractive package in PyPI v0.0.5 to v0.0.19b0 was discovered to contain a code … | rootinteractive | 2022-06-24T21:15:00Z | 2022-07-05T20:48:00Z |
| pysec-2022-218 |
|
The django-navbar-client package of v0.9.50 to v1.0.1 was discovered to contain a code ex… | django-navbar-client | 2022-06-24T21:15:00Z | 2022-07-05T20:48:00Z |
| pysec-2022-215 |
|
The ML-Scanner package in PyPI v0.1.0 to v0.1.5 was discovered to contain a code executio… | ml-scanner | 2022-06-24T21:15:00Z | 2022-07-05T20:33:43.190558Z |
| pysec-2022-214 |
|
The Beginner package in PyPI v0.0.2 to v0.0.4 was discovered to contain a code execution … | beginner | 2022-06-24T21:15:00Z | 2022-07-05T20:33:42.390810Z |
| pysec-2022-216 |
|
The Perdido package in PyPI v0.0.1 to v0.0.2 was discovered to contain a code execution b… | perdido | 2022-06-24T21:15:00Z | 2022-07-05T19:16:00Z |
| pysec-2022-213 |
|
An issue was discovered in Django 3.2 before 3.2.14 and 4.0 before 4.0.6. The Trunc() and… | django | 2022-07-04T16:15:00Z | 2022-07-04T18:45:03.823587Z |
| pysec-2022-211 |
|
Jupyter Server provides the backend (i.e. the core services, APIs, and REST endpoints) fo… | jupyter-server | 2022-06-14T21:15:00Z | 2022-06-24T18:46:20.115761Z |
| pysec-2022-210 |
|
An issue was discovered in SaltStack Salt in versions before 3002.9, 3003.5, 3004.2. PAM … | salt | 2022-06-23T17:15:00Z | 2022-06-23T18:47:26.936484Z |
| pysec-2022-209 |
|
Command Injection in GitHub repository nuitka/nuitka prior to 0.9. | nuitka | 2022-06-12T14:15:00Z | 2022-06-23T11:27:14.332916Z |
| pysec-2021-56 |
|
In SaltStack Salt 2016.9 through 3002.6, a command injection vulnerability exists in the … | salt | 2021-04-23T06:15:00Z | 2022-06-21T15:53:31.288525Z |
| pysec-2021-346 |
|
An issue was discovered in SaltStack Salt before 3003.3. The salt minion installer will a… | salt | 2021-09-08T15:15:00Z | 2022-06-21T15:53:31.228842Z |
| pysec-2021-318 |
|
An issue was discovered in SaltStack Salt before 3003.3. A user who has control of the so… | salt | 2021-09-08T15:15:00Z | 2022-06-21T15:53:31.158376Z |
| pysec-2022-208 |
|
django-s3file is a lightweight file upload input for Django and Amazon S3 . In versions p… | django-s3file | 2022-06-09T04:15:00Z | 2022-06-17T16:54:24.425121Z |
| pysec-2022-207 |
|
An issue was discovered in Couchbase Sync Gateway 3.x before 3.0.2. Admin credentials are… | couchbase | 2022-06-10T12:15:00Z | 2022-06-17T16:54:24.107616Z |
| pysec-2022-206 |
|
OAuthenticator is an OAuth token library for the JupyerHub login handler. CILogonOAuthent… | oauthenticator | 2022-06-09T13:15:00Z | 2022-06-16T05:33:11.901142Z |
| pysec-2022-205 |
|
Waitress is a Web Server Gateway Interface server for Python 2 and 3. Waitress versions 2… | waitress | 2022-05-31T23:15:00Z | 2022-06-14T20:37:51.457649Z |
| pysec-2022-204 |
|
The package cookiecutter before 2.1.1 are vulnerable to Command Injection via hg argument… | cookiecutter | 2022-06-08T08:15:00Z | 2022-06-08T10:35:31.256727Z |
| pysec-2022-203 |
|
** DISPUTED ** Improper parsing of HTTP requests in Pallets Werkzeug v2.1.0 and below all… | werkzeug | 2022-05-25T01:15:00Z | 2022-06-07T22:30:02.873111Z |
| pysec-2022-202 |
|
PyJWT is a Python implementation of RFC 7519. PyJWT supports multiple different JWT signi… | pyjwt | 2022-05-24T15:15:00Z | 2022-06-07T16:57:16.566102Z |
| ID | Description | Updated |
|---|---|---|
| gsd-2024-4064 | A vulnerability was found in Tenda AC8 16.03.34.09. It has been declared as critical. Thi… | 2024-04-24T05:02:07.857775Z |
| gsd-2024-4063 | A vulnerability was found in EZVIZ CS-C6-21WFR-8 5.2.7 Build 170628. It has been classifi… | 2024-04-24T05:02:07.881809Z |
| gsd-2024-4062 | A vulnerability was found in Hualai Xiaofang iSC5 3.2.2_112 and classified as problematic… | 2024-04-24T05:02:07.860215Z |
| gsd-2024-4061 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:07.889826Z |
| gsd-2024-4060 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:07.859677Z |
| gsd-2024-4059 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:07.864696Z |
| gsd-2024-4058 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:07.885494Z |
| gsd-2024-4057 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:07.865946Z |
| gsd-2024-4056 | Denial of service condition in M-Files Server in versions before 24.4.13592.4 and after … | 2024-04-24T05:02:07.863098Z |
| gsd-2024-4055 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:07.869036Z |
| gsd-2024-4054 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:07.864021Z |
| gsd-2024-4053 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:07.881476Z |
| gsd-2024-4052 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:07.866890Z |
| gsd-2024-4051 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:07.885698Z |
| gsd-2024-4050 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:07.861206Z |
| gsd-2024-4049 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:07.887459Z |
| gsd-2024-4048 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:07.869478Z |
| gsd-2024-4047 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:07.870133Z |
| gsd-2024-4046 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-23T05:02:11.163882Z |
| gsd-2024-4045 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-23T05:02:11.169036Z |
| gsd-2024-4044 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-23T05:02:11.164572Z |
| gsd-2024-4043 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-23T05:02:11.167708Z |
| gsd-2024-4042 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-23T05:02:11.166333Z |
| gsd-2024-4041 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-23T05:02:11.169230Z |
| gsd-2024-4040 | VFS Sandbox Escape in CrushFTP in all versions before 10.7.1 and 11.1.0 on all platforms … | 2024-04-23T05:02:11.165045Z |
| gsd-2024-4039 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-23T05:02:11.172839Z |
| gsd-2024-4038 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-23T05:02:11.167515Z |
| gsd-2024-4037 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-23T05:02:11.166853Z |
| gsd-2024-4036 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-23T05:02:11.178211Z |
| gsd-2024-4035 | The Photo Gallery – GT3 Image Gallery & Gutenberg Block Gallery plugin for WordPress is v… | 2024-04-23T05:02:11.164766Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| mal-0000-reversing-labs-32d56d5412f221a8 | 2025-12-23T08:31:31Z | 2025-12-23T08:31:31Z | |
| mal-0000-reversing-labs-83e44c6f875c0ac8 | 2025-12-23T08:31:20Z | 2025-12-23T08:31:20Z | |
| mal-0000-reversing-labs-4933c457bc45c97a | 2025-12-23T08:31:03Z | 2025-12-23T08:31:03Z | |
| mal-0000-reversing-labs-f37c9ebef9bc409e | 2025-12-23T08:31:02Z | 2025-12-23T08:31:02Z | |
| mal-0000-reversing-labs-07414ae03b10e9df | 2025-12-23T08:31:00Z | 2025-12-23T08:31:00Z | |
| mal-0000-reversing-labs-aea0204d7895e874 | 2025-12-23T08:30:37Z | 2025-12-23T08:30:37Z | |
| mal-0000-reversing-labs-2bc4df2d0bd45ac6 | 2025-12-23T08:30:36Z | 2025-12-23T08:30:36Z | |
| mal-2025-192863 | Malicious code in smart-parser (npm) | 2025-12-23T08:30:35Z | 2025-12-23T08:30:35Z |
| mal-0000-reversing-labs-9fb1aedcf7d6d180 | 2025-12-23T08:30:35Z | 2025-12-23T08:30:35Z | |
| mal-0000-reversing-labs-0ddebfd5f0b42fad | 2025-12-23T08:30:21Z | 2025-12-23T08:30:21Z | |
| mal-0000-reversing-labs-a43b76be10970d81 | 2025-12-23T08:30:17Z | 2025-12-23T08:30:17Z | |
| mal-0000-reversing-labs-2baff92083ec620c | 2025-12-23T08:30:14Z | 2025-12-23T08:30:14Z | |
| mal-2025-192862 | Malicious code in session-parse (npm) | 2025-12-23T08:30:06Z | 2025-12-23T08:30:06Z |
| mal-0000-reversing-labs-818df27e879924b1 | 2025-12-23T08:30:06Z | 2025-12-23T08:30:06Z | |
| mal-2025-192861 | Malicious code in session-keeper (npm) | 2025-12-23T08:30:05Z | 2025-12-23T08:30:05Z |
| mal-0000-reversing-labs-9796e552c469adab | 2025-12-23T08:30:05Z | 2025-12-23T08:30:05Z | |
| mal-0000-reversing-labs-28ed9c1bedc0b9e8 | 2025-12-23T08:30:03Z | 2025-12-23T08:30:03Z | |
| mal-0000-reversing-labs-20dcc48828b1cef7 | 2025-12-23T08:30:02Z | 2025-12-23T08:30:02Z | |
| mal-0000-reversing-labs-3f0d38854c965bbf | 2025-12-23T08:30:01Z | 2025-12-23T08:30:01Z | |
| mal-0000-reversing-labs-aa5e6fad267ae26f | 2025-12-23T08:29:59Z | 2025-12-23T08:29:59Z | |
| mal-2025-192860 | Malicious code in security-testing-research99 (npm) | 2025-12-23T08:29:51Z | 2025-12-23T08:29:51Z |
| mal-2025-192859 | Malicious code in security-testing-research- (npm) | 2025-12-23T08:29:51Z | 2025-12-23T08:29:51Z |
| mal-0000-reversing-labs-db2a34ba4e632bea | 2025-12-23T08:29:51Z | 2025-12-23T08:29:51Z | |
| mal-0000-reversing-labs-89cca78ed720c7c4 | 2025-12-23T08:29:51Z | 2025-12-23T08:29:51Z | |
| mal-0000-reversing-labs-b76a249515baf81a | 2025-12-23T08:29:47Z | 2025-12-23T08:29:47Z | |
| mal-0000-reversing-labs-28f58f6780cbfa6c | 2025-12-23T08:29:47Z | 2025-12-23T08:29:47Z | |
| mal-0000-reversing-labs-bc7e62a41f59ebec | 2025-12-23T08:29:46Z | 2025-12-23T08:29:46Z | |
| mal-0000-reversing-labs-e3baee0ff379c2e4 | 2025-12-23T08:29:45Z | 2025-12-23T08:29:45Z | |
| mal-0000-reversing-labs-af8117684352bba6 | 2025-12-23T08:29:44Z | 2025-12-23T08:29:44Z | |
| mal-0000-reversing-labs-42687e9db26ef26b | 2025-12-23T08:29:37Z | 2025-12-23T08:29:37Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| wid-sec-w-2024-2036 | Red Hat OpenShift: Mehrere Schwachstellen ermöglichen Umgehen von Sicherheitsvorkehrungen | 2024-09-03T22:00:00.000+00:00 | 2025-06-04T22:00:00.000+00:00 |
| wid-sec-w-2024-1970 | Linux Kernel: Schwachstelle ermöglicht Offenlegung von Informationen | 2024-09-02T22:00:00.000+00:00 | 2025-06-04T22:00:00.000+00:00 |
| wid-sec-w-2024-1969 | OpenSC: Mehrere Schwachstellen ermöglichen Offenlegung von Informationen | 2024-09-02T22:00:00.000+00:00 | 2025-06-04T22:00:00.000+00:00 |
| wid-sec-w-2024-1967 | Linux Kernel: Mehrere Schwachstellen ermöglichen nicht spezifizierten Angriff | 2024-09-01T22:00:00.000+00:00 | 2025-06-04T22:00:00.000+00:00 |
| wid-sec-w-2024-1956 | Linux Kernel: Schwachstelle ermöglicht Offenlegung von Informationen | 2024-08-29T22:00:00.000+00:00 | 2025-06-04T22:00:00.000+00:00 |
| wid-sec-w-2024-1927 | Linux Kernel: Mehrere Schwachstellen | 2024-08-26T22:00:00.000+00:00 | 2025-06-04T22:00:00.000+00:00 |
| wid-sec-w-2024-1925 | Linux Kernel: Mehrere Schwachstellen | 2024-08-25T22:00:00.000+00:00 | 2025-06-04T22:00:00.000+00:00 |
| wid-sec-w-2024-1923 | Linux Kernel (Bluetooth): Schwachstelle ermöglicht Denial of Service | 2024-08-25T22:00:00.000+00:00 | 2025-06-04T22:00:00.000+00:00 |
| wid-sec-w-2024-1919 | Linux-Kernel: Schwachstelle ermöglicht Privilegienerweiterung und Codeausführung | 2024-08-25T22:00:00.000+00:00 | 2025-06-04T22:00:00.000+00:00 |
| wid-sec-w-2024-1913 | Red Hat OpenShift Container Platform: Mehrere Schwachstellen | 2024-08-22T22:00:00.000+00:00 | 2025-06-04T22:00:00.000+00:00 |
| wid-sec-w-2024-1898 | Linux Kernel: Mehrere Schwachstellen ermöglichen Denial of Service | 2024-08-21T22:00:00.000+00:00 | 2025-06-04T22:00:00.000+00:00 |
| wid-sec-w-2024-1858 | Linux Kernel: Schwachstelle ermöglicht Denial of Service | 2024-08-14T22:00:00.000+00:00 | 2025-06-04T22:00:00.000+00:00 |
| wid-sec-w-2024-1761 | libTIFF: Schwachstelle ermöglicht Denial of Service | 2024-08-05T22:00:00.000+00:00 | 2025-06-04T22:00:00.000+00:00 |
| wid-sec-w-2024-1756 | Red Hat Enterprise Linux (python-setuptools): Schwachstelle ermöglicht Codeausführung | 2024-08-04T22:00:00.000+00:00 | 2025-06-04T22:00:00.000+00:00 |
| wid-sec-w-2024-1750 | QEMU: Schwachstelle ermöglicht Denial of Service | 2024-08-04T22:00:00.000+00:00 | 2025-06-04T22:00:00.000+00:00 |
| wid-sec-w-2024-1736 | cURL und libcurl: Schwachstelle ermöglicht Denial of Service | 2024-07-30T22:00:00.000+00:00 | 2025-06-04T22:00:00.000+00:00 |
| wid-sec-w-2024-1706 | Linux Kernel: Mehrere Schwachstellen ermöglichen Denial of Service | 2024-07-24T22:00:00.000+00:00 | 2025-06-04T22:00:00.000+00:00 |
| wid-sec-w-2024-1703 | docker: Schwachstelle ermöglicht Privilegieneskalation | 2024-07-23T22:00:00.000+00:00 | 2025-06-04T22:00:00.000+00:00 |
| wid-sec-w-2024-1697 | cURL: Mehrere Schwachstellen ermöglichen Denial of Service und Offenlegung von Informationen | 2024-07-23T22:00:00.000+00:00 | 2025-06-04T22:00:00.000+00:00 |
| wid-sec-w-2024-1691 | Linux Kernel: Schwachstelle ermöglicht Offenlegung von Informationen | 2024-07-22T22:00:00.000+00:00 | 2025-06-04T22:00:00.000+00:00 |
| wid-sec-w-2024-1684 | GStreamer: Schwachstelle ermöglicht Codeausführung | 2024-07-21T22:00:00.000+00:00 | 2025-06-04T22:00:00.000+00:00 |
| wid-sec-w-2024-1661 | Linux Kernel: Schwachstelle ermöglicht nicht spezifizierten Angriff | 2024-07-17T22:00:00.000+00:00 | 2025-06-04T22:00:00.000+00:00 |
| wid-sec-w-2024-1646 | Linux Kernel: Mehrere Schwachstellen ermöglichen Manipulation von Dateien | 2024-07-16T22:00:00.000+00:00 | 2025-06-04T22:00:00.000+00:00 |
| wid-sec-w-2024-1555 | Linux Kernel: Mehrere Schwachstellen ermöglichen nicht spezifizierten Angriff | 2024-07-09T22:00:00.000+00:00 | 2025-06-04T22:00:00.000+00:00 |
| wid-sec-w-2024-1552 | Linux Kernel: Schwachstelle ermöglicht nicht spezifizierten Angriff | 2024-07-08T22:00:00.000+00:00 | 2025-06-04T22:00:00.000+00:00 |
| wid-sec-w-2024-1536 | Linux Kernel: Schwachstelle ermöglicht nicht spezifizierten Angriff | 2024-07-07T22:00:00.000+00:00 | 2025-06-04T22:00:00.000+00:00 |
| wid-sec-w-2024-1528 | Linux Kernel: Mehrere Schwachstellen | 2024-07-04T22:00:00.000+00:00 | 2025-06-04T22:00:00.000+00:00 |
| wid-sec-w-2024-1514 | OpenSSH: Schwachstelle ermöglicht Offenlegung von Informationen | 2024-07-03T22:00:00.000+00:00 | 2025-06-04T22:00:00.000+00:00 |
| wid-sec-w-2024-1509 | QEMU: Schwachstelle ermöglicht Denial of Service und Offenlegung von Informationen | 2024-07-02T22:00:00.000+00:00 | 2025-06-04T22:00:00.000+00:00 |
| wid-sec-w-2024-1469 | OpenSSL: Schwachstelle ermöglicht Denial of Service und Offenlegung von Informationen | 2024-06-26T22:00:00.000+00:00 | 2025-06-04T22:00:00.000+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| rhsa-2023:5627 | Red Hat Security Advisory: kernel security, bug fix, and enhancement update | 2023-10-10T16:31:57+00:00 | 2025-12-26T15:31:32+00:00 |
| rhsa-2023:5684 | Red Hat Security Advisory: galera and mariadb security update | 2023-10-12T13:24:36+00:00 | 2025-12-26T15:31:30+00:00 |
| rhsa-2023:2138 | Red Hat Security Advisory: OpenShift Container Platform 4.13.0 CNF vRAN extras security update | 2023-05-18T02:33:37+00:00 | 2025-12-26T15:29:40+00:00 |
| rhsa-2023:5259 | Red Hat Security Advisory: mariadb:10.3 security, bug fix, and enhancement update | 2023-09-19T14:43:18+00:00 | 2025-12-26T15:29:35+00:00 |
| rhsa-2023:4814 | Red Hat Security Advisory: kernel-rt security and bug fix update | 2023-08-29T09:22:52+00:00 | 2025-12-26T15:29:35+00:00 |
| rhsa-2023:3299 | Red Hat Security Advisory: jenkins and jenkins-2-plugins security update | 2023-05-24T17:13:53+00:00 | 2025-12-26T15:29:35+00:00 |
| rhsa-2023:4767 | Red Hat Security Advisory: libxml2 security update | 2023-08-28T13:05:32+00:00 | 2025-12-26T15:29:34+00:00 |
| rhsa-2023:1866 | Red Hat Security Advisory: OpenShift Container Platform 4.10.58 security update | 2023-04-26T05:35:35+00:00 | 2025-12-26T15:29:34+00:00 |
| rhsa-2023:4801 | Red Hat Security Advisory: kernel security and bug fix update | 2023-08-29T09:24:43+00:00 | 2025-12-26T15:29:33+00:00 |
| rhsa-2023:4022 | Red Hat Security Advisory: kernel security and bug fix update | 2023-07-11T07:57:38+00:00 | 2025-12-26T15:29:33+00:00 |
| rhsa-2023:3609 | Red Hat Security Advisory: Red Hat OpenShift Data Foundation 4.12.4 security and Bug Fix update | 2023-06-14T21:20:34+00:00 | 2025-12-26T15:29:33+00:00 |
| rhsa-2023:1524 | Red Hat Security Advisory: OpenShift Container Platform 4.9.59 security update | 2023-04-05T23:30:39+00:00 | 2025-12-26T15:29:33+00:00 |
| rhsa-2023:6372 | Red Hat Security Advisory: gdb security update | 2023-11-07T08:48:54+00:00 | 2025-12-26T15:29:32+00:00 |
| rhsa-2023:4023 | Red Hat Security Advisory: kpatch-patch security update | 2023-07-11T07:58:03+00:00 | 2025-12-26T15:29:32+00:00 |
| rhsa-2023:3195 | Red Hat Security Advisory: jenkins and jenkins-2-plugins security update | 2023-05-18T13:01:08+00:00 | 2025-12-26T15:29:31+00:00 |
| rhsa-2023:2135 | Red Hat Security Advisory: Red Hat Process Automation Manager 7.13.3 security update | 2023-05-04T15:59:31+00:00 | 2025-12-26T15:29:31+00:00 |
| rhsa-2023:1742 | Red Hat Security Advisory: nodejs:14 security, bug fix, and enhancement update | 2023-04-12T15:04:47+00:00 | 2025-12-26T15:29:31+00:00 |
| rhsa-2023:6901 | Red Hat Security Advisory: kernel-rt security, bug fix, and enhancement update | 2023-11-14T15:24:26+00:00 | 2025-12-26T15:29:29+00:00 |
| rhsa-2023:3557 | Red Hat Security Advisory: openshift-gitops-kam security update | 2023-06-09T19:47:27+00:00 | 2025-12-26T15:29:29+00:00 |
| rhsa-2023:3388 | Red Hat Security Advisory: kernel security, bug fix, and enhancement update | 2023-05-31T15:57:57+00:00 | 2025-12-26T15:29:29+00:00 |
| rhsa-2023:3229 | Red Hat Security Advisory: openshift-gitops-kam security update | 2023-05-18T15:55:21+00:00 | 2025-12-26T15:29:29+00:00 |
| rhsa-2023:1655 | Red Hat Security Advisory: OpenShift Container Platform 4.10.56 security update | 2023-04-12T12:02:17+00:00 | 2025-12-26T15:29:29+00:00 |
| rhsa-2023:1192 | Red Hat Security Advisory: kpatch-patch security update | 2023-03-13T14:21:14+00:00 | 2025-12-26T15:29:28+00:00 |
| rhsa-2023:0858 | Red Hat Security Advisory: kpatch-patch security update | 2023-02-21T10:06:23+00:00 | 2025-12-26T15:29:27+00:00 |
| rhsa-2023:0814 | Red Hat Security Advisory: Red Hat build of Cryostat security update | 2023-02-20T12:40:17+00:00 | 2025-12-26T15:29:27+00:00 |
| rhsa-2023:2903 | Red Hat Security Advisory: php:7.4 security update | 2023-05-16T09:08:21+00:00 | 2025-12-26T15:29:25+00:00 |
| rhsa-2023:2898 | Red Hat Security Advisory: libtar security update | 2023-05-16T08:23:01+00:00 | 2025-12-26T15:29:25+00:00 |
| rhsa-2023:2417 | Red Hat Security Advisory: php:8.1 security update | 2023-05-09T10:02:31+00:00 | 2025-12-26T15:29:25+00:00 |
| rhsa-2023:1095 | Red Hat Security Advisory: zlib security update | 2023-03-07T10:03:15+00:00 | 2025-12-26T15:29:25+00:00 |
| rhsa-2023:0848 | Red Hat Security Advisory: php:8.0 security update | 2023-02-21T09:35:47+00:00 | 2025-12-26T15:29:25+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| icsa-22-286-09 | Siemens SICAM P850 and P855 Devices | 2022-10-11T00:00:00.000000Z | 2025-05-06T06:00:00.000000Z |
| icsa-22-286-08 | Siemens SCALANCE and RUGGEDCOM Devices | 2022-10-11T00:00:00.000000Z | 2025-05-06T06:00:00.000000Z |
| icsa-22-258-03 | Siemens RUGGEDCOM ROS | 2022-09-13T00:00:00.000000Z | 2025-05-06T06:00:00.000000Z |
| icsa-22-195-01 | Siemens SCALANCE X Switch Devices | 2022-07-12T00:00:00.000000Z | 2025-05-06T06:00:00.000000Z |
| icsa-22-167-14 | Siemens OpenSSL Affected Industrial Products | 2022-06-14T00:00:00.000000Z | 2025-05-06T06:00:00.000000Z |
| icsa-22-167-11 | Siemens Xpedition Designer | 2022-06-14T00:00:00.000000Z | 2025-05-06T06:00:00.000000Z |
| icsa-22-132-15 | Siemens OpenV2G | 2022-05-10T00:00:00.000000Z | 2025-05-06T06:00:00.000000Z |
| icsa-22-132-14 | Siemens Simcenter Femap | 2022-05-10T00:00:00.000000Z | 2025-05-06T06:00:00.000000Z |
| icsa-22-132-12 | Siemens Industrial Products | 2022-05-10T00:00:00.000000Z | 2025-05-06T06:00:00.000000Z |
| icsa-22-132-11 | Siemens SIMATIC CP 44x-1 RNA | 2022-05-10T00:00:00.000000Z | 2025-05-06T06:00:00.000000Z |
| icsa-22-132-09 | Siemens JT2GO and Teamcenter Visualization | 2022-05-10T00:00:00.000000Z | 2025-05-06T06:00:00.000000Z |
| icsa-22-132-07 | Siemens SICAM P850 and SICAM P855 | 2022-05-10T00:00:00.000000Z | 2025-05-06T06:00:00.000000Z |
| icsa-22-104-17 | Siemens Mendix | 2022-04-12T00:00:00.000000Z | 2025-05-06T06:00:00.000000Z |
| icsa-22-104-15 | Siemens Simcenter Femap | 2022-04-12T00:00:00.000000Z | 2025-05-06T06:00:00.000000Z |
| icsa-22-104-14 | Siemens SIMATIC STEP 7 (TIA Portal) | 2022-04-12T00:00:00.000000Z | 2025-05-06T06:00:00.000000Z |
| icsa-22-104-11 | Siemens SIMATIC Energy Manager | 2022-04-12T00:00:00.000000Z | 2025-05-06T06:00:00.000000Z |
| icsa-22-104-10 | Siemens SICAM A8000 | 2022-04-12T00:00:00.000000Z | 2025-05-06T06:00:00.000000Z |
| icsa-22-104-09 | Siemens SCALANCE X-300 Switches | 2022-04-12T00:00:00.000000Z | 2025-05-06T06:00:00.000000Z |
| icsa-22-104-08 | Siemens SCALANCE W1700 | 2022-04-12T00:00:00.000000Z | 2025-05-06T06:00:00.000000Z |
| icsa-22-069-13 | Siemens Mendix | 2022-03-08T00:00:00.000000Z | 2025-05-06T06:00:00.000000Z |
| icsa-22-069-11 | Siemens SINUMERIK MC | 2022-03-08T00:00:00.000000Z | 2025-05-06T06:00:00.000000Z |
| icsa-22-069-10 | Siemens Simcenter Femap | 2022-02-17T00:00:00.000000Z | 2025-05-06T06:00:00.000000Z |
| icsa-22-069-09 | Siemens SINEC INS | 2022-03-08T00:00:00.000000Z | 2025-05-06T06:00:00.000000Z |
| icsa-22-069-08 | Siemens Polarion ALM | 2022-03-08T00:00:00.000000Z | 2025-05-06T06:00:00.000000Z |
| icsa-22-069-07 | Siemens Climatix POL909 | 2022-03-08T00:00:00.000000Z | 2025-05-06T06:00:00.000000Z |
| icsa-22-069-06 | Siemens COMOS | 2022-03-08T00:00:00.000000Z | 2025-05-06T06:00:00.000000Z |
| icsa-22-069-05 | Siemens Simcenter STAR-CCM+ Viewer | 2022-03-08T00:00:00.000000Z | 2025-05-06T06:00:00.000000Z |
| icsa-22-069-04 | Siemens SINEMA Mendix Forgot Password Appstore | 2022-03-08T00:00:00.000000Z | 2025-05-06T06:00:00.000000Z |
| icsa-22-069-02 | Siemens SIMOTICS CONNECT 400 | 2022-03-08T00:00:00.000000Z | 2025-05-06T06:00:00.000000Z |
| icsa-22-041-06 | Siemens Spectrum Power 4 | 2022-02-08T00:00:00.000000Z | 2025-05-06T06:00:00.000000Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| cisco-sa-apvlan-TDTtb4FY | Cisco Access Points VLAN Bypass from Native VLAN Vulnerability | 2022-09-27T16:00:00+00:00 | 2022-10-04T13:22:46+00:00 |
| cisco-sa-wsa-prv-esc-8pdru8t8 | Cisco Secure Web Appliance Privilege Escalation Vulnerability | 2022-08-17T16:00:00+00:00 | 2022-10-03T18:13:53+00:00 |
| cisco-sa-wsa-prv-esc-8PdRU8t8 | Cisco Secure Web Appliance Privilege Escalation Vulnerability | 2022-08-17T16:00:00+00:00 | 2022-10-03T18:13:53+00:00 |
| cisco-sa-sd-wan-priv-e6e8tedf | Cisco SD-WAN Software Privilege Escalation Vulnerabilities | 2022-09-28T16:00:00+00:00 | 2022-09-29T21:59:32+00:00 |
| cisco-sa-sd-wan-priv-E6e8tEdF | Cisco SD-WAN Software Privilege Escalation Vulnerabilities | 2022-09-28T16:00:00+00:00 | 2022-09-29T21:59:32+00:00 |
| cisco-sa-duo-macos-bypass-ukznpxe6 | Cisco Duo for macOS Authentication Bypass Vulnerability | 2022-09-28T16:00:00+00:00 | 2022-09-29T21:21:01+00:00 |
| cisco-sa-duo-macOS-bypass-uKZNpXE6 | Cisco Duo for macOS Authentication Bypass Vulnerability | 2022-09-28T16:00:00+00:00 | 2022-09-29T21:21:01+00:00 |
| cisco-sa-wlc-udp-dos-xdyewhnz | Cisco IOS XE Software for Embedded Wireless Controllers on Catalyst 9100 Series Access Points UDP Processing Denial of Service Vulnerability | 2022-09-28T16:00:00+00:00 | 2022-09-28T16:00:00+00:00 |
| cisco-sa-wlc-udp-dos-XDyEwhNz | Cisco IOS XE Software for Embedded Wireless Controllers on Catalyst 9100 Series Access Points UDP Processing Denial of Service Vulnerability | 2022-09-28T16:00:00+00:00 | 2022-09-28T16:00:00+00:00 |
| cisco-sa-wlc-dos-mkgrrscb | Cisco Wireless LAN Controller AireOS Software FIPS Mode Denial of Service Vulnerability | 2022-09-28T16:00:00+00:00 | 2022-09-28T16:00:00+00:00 |
| cisco-sa-wlc-dos-mKGRrsCB | Cisco Wireless LAN Controller AireOS Software FIPS Mode Denial of Service Vulnerability | 2022-09-28T16:00:00+00:00 | 2022-09-28T16:00:00+00:00 |
| cisco-sa-wlc-dhcp-dos-76pcjpxk | Cisco IOS XE Wireless Controller Software for the Catalyst 9000 Family DHCP Processing Denial of Service Vulnerability | 2022-09-28T16:00:00+00:00 | 2022-09-28T16:00:00+00:00 |
| cisco-sa-wlc-dhcp-dos-76pCjPxK | Cisco IOS XE Wireless Controller Software for the Catalyst 9000 Family DHCP Processing Denial of Service Vulnerability | 2022-09-28T16:00:00+00:00 | 2022-09-28T16:00:00+00:00 |
| cisco-sa-webui-cmdinj-gje47emn | Cisco IOS XE Software Web UI Command Injection Vulnerability | 2022-09-28T16:00:00+00:00 | 2022-09-28T16:00:00+00:00 |
| cisco-sa-webui-cmdinj-Gje47EMn | Cisco IOS XE Software Web UI Command Injection Vulnerability | 2022-09-28T16:00:00+00:00 | 2022-09-28T16:00:00+00:00 |
| cisco-sa-ssh-excpt-dos-fzobqtnk | Cisco IOS and IOS XE Software SSH Denial of Service Vulnerability | 2022-09-28T16:00:00+00:00 | 2022-09-28T16:00:00+00:00 |
| cisco-sa-ssh-excpt-dos-FzOBQTnk | Cisco IOS and IOS XE Software SSH Denial of Service Vulnerability | 2022-09-28T16:00:00+00:00 | 2022-09-28T16:00:00+00:00 |
| cisco-sa-sdwan-avc-nddsgb8 | Cisco Software-Defined Application Visibility and Control on Cisco vManage Authentication Bypass Vulnerability | 2022-09-28T16:00:00+00:00 | 2022-09-28T16:00:00+00:00 |
| cisco-sa-sdwan-avc-NddSGB8 | Cisco Software-Defined Application Visibility and Control on Cisco vManage Authentication Bypass Vulnerability | 2022-09-28T16:00:00+00:00 | 2022-09-28T16:00:00+00:00 |
| cisco-sa-sdavc-za5fpxx2 | Cisco Software-Defined Application Visibility and Control on Cisco vManage Static Username and Password Vulnerability | 2022-09-28T16:00:00+00:00 | 2022-09-28T16:00:00+00:00 |
| cisco-sa-sdavc-ZA5fpXX2 | Cisco Software-Defined Application Visibility and Control on Cisco vManage Static Username and Password Vulnerability | 2022-09-28T16:00:00+00:00 | 2022-09-28T16:00:00+00:00 |
| cisco-sa-iosxe-mpls-dos-ab4oul3 | Cisco IOS XE Software for Catalyst Switches MPLS Denial of Service Vulnerability | 2022-09-28T16:00:00+00:00 | 2022-09-28T16:00:00+00:00 |
| cisco-sa-iosxe-mpls-dos-Ab4OUL3 | Cisco IOS XE Software for Catalyst Switches MPLS Denial of Service Vulnerability | 2022-09-28T16:00:00+00:00 | 2022-09-28T16:00:00+00:00 |
| cisco-sa-iosxe-cip-dos-9rtbklt9 | Cisco IOS and IOS XE Software Common Industrial Protocol Request Denial of Service Vulnerability | 2022-09-28T16:00:00+00:00 | 2022-09-28T16:00:00+00:00 |
| cisco-sa-iosxe-cip-dos-9rTbKLt9 | Cisco IOS and IOS XE Software Common Industrial Protocol Request Denial of Service Vulnerability | 2022-09-28T16:00:00+00:00 | 2022-09-28T16:00:00+00:00 |
| cisco-sa-iosxe-6vpe-dos-tjbtf5zv | Cisco IOS XE Software IPv6 VPN over MPLS Denial of Service Vulnerability | 2022-09-28T16:00:00+00:00 | 2022-09-28T16:00:00+00:00 |
| cisco-sa-iosxe-6vpe-dos-tJBtf5Zv | Cisco IOS XE Software IPv6 VPN over MPLS Denial of Service Vulnerability | 2022-09-28T16:00:00+00:00 | 2022-09-28T16:00:00+00:00 |
| cisco-sa-ios-xe-cat-verify-d4neqa6q | Cisco IOS XE Software for Catalyst 9200 Series Switches Arbitrary Code Execution Vulnerability | 2022-09-28T16:00:00+00:00 | 2022-09-28T16:00:00+00:00 |
| cisco-sa-ios-xe-cat-verify-D4NEQA6q | Cisco IOS XE Software for Catalyst 9200 Series Switches Arbitrary Code Execution Vulnerability | 2022-09-28T16:00:00+00:00 | 2022-09-28T16:00:00+00:00 |
| cisco-sa-ewc-priv-esc-nderyltk | Cisco IOS XE Software for Embedded Wireless Controllers on Catalyst Access Points Privilege Escalation Vulnerability | 2022-09-28T16:00:00+00:00 | 2022-09-28T16:00:00+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| msrc_cve-2024-38594 | net: stmmac: move the EST lock to struct stmmac_priv | 2024-06-02T07:00:00.000Z | 2025-11-02T01:01:30.000Z |
| msrc_cve-2025-40106 | comedi: fix divide-by-zero in comedi_buf_munge() | 2025-10-02T00:00:00.000Z | 2025-11-01T01:02:23.000Z |
| msrc_cve-2025-21946 | ksmbd: fix out-of-bounds in parse_sec_desc() | 2025-04-02T00:00:00.000Z | 2025-11-01T01:02:10.000Z |
| msrc_cve-2025-21944 | ksmbd: fix bug on trap in smb2_lock | 2025-04-02T00:00:00.000Z | 2025-11-01T01:02:04.000Z |
| msrc_cve-2025-21881 | uprobes: Reject the shared zeropage in uprobe_write_opcode() | 2025-03-02T00:00:00.000Z | 2025-11-01T01:01:55.000Z |
| msrc_cve-2025-21872 | efi: Don't map the entire mokvar table to determine its size | 2025-03-02T00:00:00.000Z | 2025-11-01T01:01:49.000Z |
| msrc_cve-2023-53012 | thermal: core: call put_device() only after device_register() fails | 2025-03-02T00:00:00.000Z | 2025-11-01T01:01:36.000Z |
| msrc_cve-2023-53010 | bnxt: Do not read past the end of test names | 2025-03-02T00:00:00.000Z | 2025-11-01T01:01:31.000Z |
| msrc_cve-2023-53009 | drm/amdkfd: Add sync after creating vram bo | 2025-03-02T00:00:00.000Z | 2025-11-01T01:01:25.000Z |
| msrc_cve-2025-12060 | Keras keras.utils.get_file Utility Path Traversal Vulnerability | 2025-10-02T00:00:00.000Z | 2025-11-01T01:01:19.000Z |
| msrc_cve-2025-60711 | Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability | 2025-10-14T07:00:00.000Z | 2025-10-31T07:00:00.000Z |
| msrc_cve-2025-61105 | FRRouting/frr from v4.0 through v10.4.1 was discovered to contain a NULL pointer dereference via the show_vty_link_info function at ospf_ext.c. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted OSPF packet. | 2025-10-02T00:00:00.000Z | 2025-10-31T01:11:21.000Z |
| msrc_cve-2025-61102 | FRRouting/frr from v4.0 through v10.4.1 was discovered to contain a NULL pointer dereference via the show_vty_ext_link_adj_sid function at ospf_ext.c. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted OSPF packet. | 2025-10-02T00:00:00.000Z | 2025-10-31T01:11:15.000Z |
| msrc_cve-2025-61107 | FRRouting/frr from v4.0 through v10.4.1 was discovered to contain a NULL pointer dereference via the show_vty_ext_pref_pref_sid function at ospf_ext.c. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted LSA Update packet. | 2025-10-02T00:00:00.000Z | 2025-10-31T01:11:07.000Z |
| msrc_cve-2025-61106 | FRRouting/frr from v4.0 through v10.4.1 was discovered to contain a NULL pointer dereference via the show_vty_ext_pref_pref_sid function at ospf_ext.c. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted OSPF packet. | 2025-10-02T00:00:00.000Z | 2025-10-31T01:10:59.000Z |
| msrc_cve-2025-61103 | FRRouting/frr from v4.0 through v10.4.1 was discovered to contain a NULL pointer dereference via the show_vty_ext_link_lan_adj_sid function at ospf_ext.c. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted OSPF packet. | 2025-10-02T00:00:00.000Z | 2025-10-31T01:10:51.000Z |
| msrc_cve-2025-40094 | usb: gadget: f_acm: Refactor bind path to use __free() | 2025-10-02T00:00:00.000Z | 2025-10-31T01:10:37.000Z |
| msrc_cve-2025-40092 | usb: gadget: f_ncm: Refactor bind path to use __free() | 2025-10-02T00:00:00.000Z | 2025-10-31T01:10:32.000Z |
| msrc_cve-2025-40088 | hfsplus: fix slab-out-of-bounds read in hfsplus_strcasecmp() | 2025-10-02T00:00:00.000Z | 2025-10-31T01:10:26.000Z |
| msrc_cve-2025-40093 | usb: gadget: f_ecm: Refactor bind path to use __free() | 2025-10-02T00:00:00.000Z | 2025-10-31T01:10:21.000Z |
| msrc_cve-2025-40090 | ksmbd: fix recursive locking in RPC handle list access | 2025-10-02T00:00:00.000Z | 2025-10-31T01:10:10.000Z |
| msrc_cve-2025-40097 | ALSA: hda: Fix missing pointer check in hda_component_manager_init function | 2025-10-02T00:00:00.000Z | 2025-10-31T01:09:31.000Z |
| msrc_cve-2025-40095 | usb: gadget: f_rndis: Refactor bind path to use __free() | 2025-10-02T00:00:00.000Z | 2025-10-31T01:09:26.000Z |
| msrc_cve-2025-58189 | ALPN negotiation error contains attacker controlled information in crypto/tls | 2025-10-02T00:00:00.000Z | 2025-10-31T01:09:20.000Z |
| msrc_cve-2025-12058 | Vulnerability in Keras Model.load_model Leading to Arbitrary Local File Loading and SSRF | 2025-10-02T00:00:00.000Z | 2025-10-31T01:03:15.000Z |
| msrc_cve-2025-21838 | usb: gadget: core: flush gadget workqueue after device removal | 2025-03-02T00:00:00.000Z | 2025-10-31T01:03:01.000Z |
| msrc_cve-2025-21831 | PCI: Avoid putting some root ports into D3 on TUXEDO Sirius Gen1 | 2025-03-02T00:00:00.000Z | 2025-10-31T01:02:56.000Z |
| msrc_cve-2025-53783 | Microsoft Teams Remote Code Execution Vulnerability | 2025-08-12T07:00:00.000Z | 2025-10-30T07:00:00.000Z |
| msrc_cve-2025-21750 | wifi: brcmfmac: Check the return value of of_property_read_string_index() | 2025-02-02T00:00:00.000Z | 2025-10-30T01:01:57.000Z |
| msrc_cve-2025-21738 | ata: libata-sff: Ensure that we cannot write outside the allocated buffer | 2025-02-02T00:00:00.000Z | 2025-10-30T01:01:51.000Z |
| ID | Description | Updated |
|---|---|---|
| var-200510-0403 | Integer overflow in Apple QuickTime Player before 7.1 allows remote attackers to execute … | 2024-07-23T19:53:25.750000Z |
| var-201905-0709 | Microarchitectural Store Buffer Data Sampling (MSBDS): Store buffers on some microprocess… | 2024-07-23T19:53:24.913000Z |
| var-201302-0301 | Buffer overflow in Adobe Flash Player before 10.3.183.63 and 11.x before 11.6.602.168 on … | 2024-07-23T19:53:24.502000Z |
| var-201210-0300 | ISC BIND 9.x before 9.7.6-P4, 9.8.x before 9.8.3-P4, 9.9.x before 9.9.1-P4, and 9.4-ESV a… | 2024-07-23T19:53:24.742000Z |
| var-201501-0338 | The ssl3_get_key_exchange function in s3_clnt.c in OpenSSL before 0.9.8zd, 1.0.0 before 1… | 2024-07-23T19:53:23.981000Z |
| var-201310-0356 | Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, J… | 2024-07-23T19:53:23.134000Z |
| var-202202-0081 | In Expat (aka libexpat) before 2.4.5, there is an integer overflow in storeRawNames. Expa… | 2024-07-23T19:53:22.024000Z |
| var-201306-0139 | Unspecified vulnerability in the Javadoc component in Oracle Java SE 7 Update 21 and earl… | 2024-07-23T19:53:21.027000Z |
| var-201605-0494 | Use-after-free vulnerability in the xmlDictComputeFastKey function in libxml2 before 2.9.… | 2024-07-23T19:51:11.128000Z |
| var-200608-0035 | Unspecified vulnerability in ImageIO in Apple Mac OS X 10.4.7 allows user-assisted attack… | 2024-07-23T19:51:11.554000Z |
| var-201506-0117 | ext/phar/phar.c in PHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x before 5.6.8 allows … | 2024-07-23T19:51:09.324000Z |
| var-201006-1241 | Use-after-free vulnerability in WebKit in Apple Safari before 5.0 on Mac OS X 10.5 throug… | 2024-07-23T19:51:09.764000Z |
| var-202002-1479 | A denial of service issue was addressed with improved memory handling. This issue is fixe… | 2024-07-23T19:50:58.130000Z |
| var-202205-1314 | A memory corruption issue was addressed with improved state management. This issue is fix… | 2024-07-23T19:50:57.599000Z |
| var-201912-0126 | A validation issue was addressed with improved input sanitization. This issue is fixed in… | 2024-07-23T19:50:56.137000Z |
| var-202105-0904 | A flaw was found in the Linux kernel in versions before 5.12. The value of internal.ndata… | 2024-07-23T19:50:13.905000Z |
| var-201206-0057 | Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java … | 2024-07-23T19:50:12.882000Z |
| var-201912-0124 | Multiple memory corruption issues were addressed with improved memory handling. This issu… | 2024-07-23T19:49:30.083000Z |
| var-201908-0421 | Some HTTP/2 implementations are vulnerable to window size manipulation and stream priorit… | 2024-07-23T19:49:30.261000Z |
| var-200912-0769 | ntp_request.c in ntpd in NTP before 4.2.4p8, and 4.2.5, allows remote attackers to cause … | 2024-07-23T19:49:27.301000Z |
| var-200608-0043 | The Download Validation in Mail in Mac OS X 10.4 does not properly recognize attachment f… | 2024-07-23T19:48:51.891000Z |
| var-200810-0137 | Integer overflow in the WriteProlog function in texttops in CUPS before 1.3.9 allows remo… | 2024-07-23T19:48:47.990000Z |
| var-201707-1241 | In Apache httpd before 2.2.34 and 2.4.x before 2.4.27, the value placeholder in [Proxy-]A… | 2024-07-23T19:48:16.667000Z |
| var-201702-0869 | An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. Safari … | 2024-07-23T19:48:15.077000Z |
| var-201006-0052 | Cross-site scripting (XSS) vulnerability in the WEBrick HTTP server in Ruby in Apple Mac … | 2024-07-23T19:48:10.624000Z |
| var-201904-1405 | A consistency issue existed in the handling of application snapshots. The issue was addre… | 2024-07-23T19:47:38.995000Z |
| var-202101-0221 | A flaw was found in dnsmasq before version 2.83. When getting a reply from a forwarded qu… | 2024-07-23T19:47:29.143000Z |
| var-201912-0603 | Multiple memory corruption issues were addressed with improved memory handling. This issu… | 2024-07-23T19:47:28.350000Z |
| var-201006-1162 | WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4… | 2024-07-23T19:47:26.805000Z |
| var-201711-0472 | An issue was discovered in certain Apple products. iOS before 11.1 is affected. Safari be… | 2024-07-23T19:47:23.684000Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| jvndb-2018-009387 | Mizuho Bank Mizuho Direct App for Android fails to verify SSL server certificates | 2018-11-19T15:44+09:00 | 2019-08-27T16:48+09:00 |
| jvndb-2018-000136 | Installer of Mapping Tool may insecurely load Dynamic Link Libraries | 2018-12-25T16:18+09:00 | 2019-08-27T16:36+09:00 |
| jvndb-2018-000115 | WordPress plugin "Event Calendar WD" vulnerable to cross-site scripting | 2018-11-02T14:56+09:00 | 2019-08-27T15:15+09:00 |
| jvndb-2018-000135 | WordPress plugin "Google XML Sitemaps" vulnerable to cross-site scripting | 2018-12-25T16:19+09:00 | 2019-08-27T15:12+09:00 |
| jvndb-2018-000137 | GROWI vulnerable to cross-site scripting | 2018-12-26T16:36+09:00 | 2019-08-27T15:07+09:00 |
| jvndb-2018-000077 | Multiple vulnerabilities in Aterm HC100RC | 2018-07-12T15:04+09:00 | 2019-08-27T13:52+09:00 |
| jvndb-2018-000075 | Multiple OS command injection vulnerabilities in Aterm WG1200HP | 2018-07-12T15:04+09:00 | 2019-08-27T13:44+09:00 |
| jvndb-2018-000119 | Cybozu Mailwise vulnerable to directory traversal | 2018-11-14T15:34+09:00 | 2019-08-27T13:37+09:00 |
| jvndb-2018-000120 | Multiple directory traversal vulnerabilities in Cybozu Office | 2018-11-14T15:38+09:00 | 2019-08-27T12:28+09:00 |
| jvndb-2018-000121 | Cybozu Dezie vulnerable to directory traversal | 2018-11-14T15:42+09:00 | 2019-08-27T12:25+09:00 |
| jvndb-2018-000126 | Multiple vulnerabilities in Cybozu Remote Service | 2018-12-10T14:26+09:00 | 2019-08-27T11:48+09:00 |
| jvndb-2018-000129 | Multiple vulnerabilities in i-FILTER | 2018-12-07T14:30+09:00 | 2019-08-27T11:45+09:00 |
| jvndb-2018-000117 | Multiple vulnerabilities in WordPress plugin "LearnPress" | 2018-11-09T16:13+09:00 | 2019-08-27T11:35+09:00 |
| jvndb-2018-000131 | Multiple vulnerabilities in Aterm WF1200CR and Aterm WG1200CR | 2018-12-14T14:53+09:00 | 2019-08-27T11:33+09:00 |
| jvndb-2018-000097 | Multiple FXC network devices vulnerable to cross-site scripting | 2018-09-13T13:57+09:00 | 2019-08-27T11:30+09:00 |
| jvndb-2018-000101 | The installer of Baidu Browser may insecurely load Dynamic Link Libraries | 2018-10-03T15:02+09:00 | 2019-08-27T10:39+09:00 |
| jvndb-2018-000111 | BlueStacks App Player fails to restrict access permissions | 2018-10-24T16:13+09:00 | 2019-08-27T10:35+09:00 |
| jvndb-2018-000109 | Multiple vulnerabilities in YukiWiki | 2018-10-19T14:31+09:00 | 2019-08-27T10:32+09:00 |
| jvndb-2019-000051 | EC-CUBE plugin "Amazon Pay Plugin 2.12,2.13" vulnerable to cross-site scripting | 2019-08-07T13:58+09:00 | 2019-08-07T13:58+09:00 |
| jvndb-2018-000112 | SecureCore Standard Edition vulnerable to authentication bypass | 2018-10-24T16:07+09:00 | 2019-08-06T17:34+09:00 |
| jvndb-2018-000105 | Metabase vulnerable to cross-site scripting | 2018-10-11T15:54+09:00 | 2019-07-26T17:49+09:00 |
| jvndb-2018-000104 | Multiple vulnerabilities in FileZen | 2018-10-15T15:26+09:00 | 2019-07-26T17:00+09:00 |
| jvndb-2018-000103 | Music Center for PC improperly verifies software update files | 2018-10-09T16:22+09:00 | 2019-07-26T15:57+09:00 |
| jvndb-2018-000099 | Cybozu Garoon vulnerable to directory traversal | 2018-09-10T14:01+09:00 | 2019-07-26T15:28+09:00 |
| jvndb-2018-000080 | Movable Type plugin MTAppjQuery vulnerable to PHP code execution | 2018-07-18T15:35+09:00 | 2019-07-26T15:23+09:00 |
| jvndb-2018-000113 | Multiple vulnerabilities in OpenDolphin | 2018-10-26T16:16+09:00 | 2019-07-26T14:35+09:00 |
| jvndb-2018-000110 | Web Isolation vulnerable to cross-site scripting | 2018-10-19T14:45+09:00 | 2019-07-26T14:06+09:00 |
| jvndb-2018-000095 | AttacheCase vulnerable to arbitrary script execution | 2018-08-31T15:59+09:00 | 2019-07-26T12:19+09:00 |
| jvndb-2018-000083 | The installers of multiple Canon IT Solutions Inc. software programs may insecurely load Dynamic Link Libraries | 2018-07-24T14:43+09:00 | 2019-07-26T12:05+09:00 |
| jvndb-2018-000084 | LINE MUSIC for Android fails to verify SSL server certificates | 2018-07-26T14:58+09:00 | 2019-07-25T17:28+09:00 |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| suse-su-2025:03061-1 | Security update for munge | 2025-09-03T15:51:38Z | 2025-09-03T15:51:38Z |
| suse-su-2025:03018-2 | Security update for postgresql15 | 2025-09-03T14:29:44Z | 2025-09-03T14:29:44Z |
| suse-su-2025:03057-1 | Security update for python-aiohttp | 2025-09-03T12:48:44Z | 2025-09-03T12:48:44Z |
| suse-su-2025:03056-1 | Security update for munge | 2025-09-03T10:48:34Z | 2025-09-03T10:48:34Z |
| suse-su-2025:03053-1 | Security update for ucode-intel | 2025-09-02T17:42:12Z | 2025-09-02T17:42:12Z |
| suse-su-2025:03052-1 | Security update for ucode-intel | 2025-09-02T17:41:10Z | 2025-09-02T17:41:10Z |
| suse-su-2025:03051-1 | Security update for python-eventlet | 2025-09-02T15:38:58Z | 2025-09-02T15:38:58Z |
| suse-su-2025:03049-1 | Security update for python-future | 2025-09-02T15:31:29Z | 2025-09-02T15:31:29Z |
| suse-su-2025:02993-2 | Security update for jetty-minimal | 2025-09-01T14:04:07Z | 2025-09-01T14:04:07Z |
| suse-su-2025:02993-1 | Security update for jetty-minimal | 2025-09-01T14:04:07Z | 2025-09-01T14:04:07Z |
| suse-su-2025:03039-1 | Recommended update for nginx | 2025-09-01T13:56:30Z | 2025-09-01T13:56:30Z |
| suse-su-2025:03038-1 | Security update for python-future | 2025-09-01T13:40:43Z | 2025-09-01T13:40:43Z |
| suse-su-2025:02739-2 | Security update for ruby2.5 | 2025-09-01T13:05:15Z | 2025-09-01T13:05:15Z |
| suse-su-2025:03037-1 | Security update for git | 2025-09-01T12:45:59Z | 2025-09-01T12:45:59Z |
| suse-su-2025:20648-1 | Security update for kernel-livepatch-MICRO-6-0-RT_Update_3 | 2025-09-01T10:50:22Z | 2025-09-01T10:50:22Z |
| suse-su-2025:20690-1 | Security update for kernel-livepatch-MICRO-6-0-RT_Update_9 | 2025-09-01T10:48:51Z | 2025-09-01T10:48:51Z |
| suse-su-2025:20647-1 | Security update for kernel-livepatch-MICRO-6-0-RT_Update_9 | 2025-09-01T10:48:51Z | 2025-09-01T10:48:51Z |
| suse-su-2025:20682-1 | Security update for kernel-livepatch-MICRO-6-0_Update_9 | 2025-09-01T10:48:27Z | 2025-09-01T10:48:27Z |
| suse-su-2025:20646-1 | Security update for kernel-livepatch-MICRO-6-0_Update_9 | 2025-09-01T10:48:27Z | 2025-09-01T10:48:27Z |
| suse-su-2025:20681-1 | Security update for kernel-livepatch-MICRO-6-0_Update_2 | 2025-09-01T10:42:59Z | 2025-09-01T10:42:59Z |
| suse-su-2025:20645-1 | Security update for kernel-livepatch-MICRO-6-0_Update_2 | 2025-09-01T10:42:59Z | 2025-09-01T10:42:59Z |
| suse-su-2025:02522-2 | Security update for libarchive | 2025-09-01T07:03:57Z | 2025-09-01T07:03:57Z |
| suse-su-2025:03032-1 | Security update for python | 2025-08-29T15:14:42Z | 2025-08-29T15:14:42Z |
| suse-su-2025:03031-1 | Security update for postgresql14 | 2025-08-29T15:13:48Z | 2025-08-29T15:13:48Z |
| suse-su-2025:03030-1 | Security update for postgresql15 | 2025-08-29T15:12:06Z | 2025-08-29T15:12:06Z |
| suse-su-2025:20689-1 | Security update for kernel-livepatch-MICRO-6-0-RT_Update_7 | 2025-08-29T14:48:32Z | 2025-08-29T14:48:32Z |
| suse-su-2025:20639-1 | Security update for kernel-livepatch-MICRO-6-0-RT_Update_7 | 2025-08-29T14:48:32Z | 2025-08-29T14:48:32Z |
| suse-su-2025:20680-1 | Security update for kernel-livepatch-MICRO-6-0_Update_7 | 2025-08-29T14:27:08Z | 2025-08-29T14:27:08Z |
| suse-su-2025:20679-1 | Security update for kernel-livepatch-MICRO-6-0_Update_6 | 2025-08-29T14:27:08Z | 2025-08-29T14:27:08Z |
| suse-su-2025:20678-1 | Security update for kernel-livepatch-MICRO-6-0_Update_5 | 2025-08-29T14:27:08Z | 2025-08-29T14:27:08Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| opensuse-su-2025:14778-1 | kernel-firmware-dpaa2-20250206-1.1 on GA media | 2025-02-12T00:00:00Z | 2025-02-12T00:00:00Z |
| opensuse-su-2025:14777-1 | kernel-firmware-chelsio-20250206-1.1 on GA media | 2025-02-12T00:00:00Z | 2025-02-12T00:00:00Z |
| opensuse-su-2025:14776-1 | kernel-firmware-brcm-20250206-1.1 on GA media | 2025-02-12T00:00:00Z | 2025-02-12T00:00:00Z |
| opensuse-su-2025:14775-1 | kernel-firmware-bnx2-20250206-1.1 on GA media | 2025-02-12T00:00:00Z | 2025-02-12T00:00:00Z |
| opensuse-su-2025:14774-1 | kernel-firmware-bluetooth-20250208-1.1 on GA media | 2025-02-12T00:00:00Z | 2025-02-12T00:00:00Z |
| opensuse-su-2025:14773-1 | kernel-firmware-atheros-20250206-1.1 on GA media | 2025-02-12T00:00:00Z | 2025-02-12T00:00:00Z |
| opensuse-su-2025:14772-1 | kernel-firmware-ath12k-20250206-1.1 on GA media | 2025-02-12T00:00:00Z | 2025-02-12T00:00:00Z |
| opensuse-su-2025:14771-1 | kernel-firmware-ath11k-20250206-1.1 on GA media | 2025-02-12T00:00:00Z | 2025-02-12T00:00:00Z |
| opensuse-su-2025:14770-1 | kernel-firmware-ath10k-20250206-1.1 on GA media | 2025-02-12T00:00:00Z | 2025-02-12T00:00:00Z |
| opensuse-su-2025:14769-1 | kernel-firmware-amdgpu-20250206-1.1 on GA media | 2025-02-12T00:00:00Z | 2025-02-12T00:00:00Z |
| opensuse-su-2025:14768-1 | grafana-11.5.1-1.1 on GA media | 2025-02-12T00:00:00Z | 2025-02-12T00:00:00Z |
| opensuse-su-2025:14767-1 | emacs-29.4-14.1 on GA media | 2025-02-12T00:00:00Z | 2025-02-12T00:00:00Z |
| opensuse-su-2025:14766-1 | libngtcp2-16-1.10.0-1.1 on GA media | 2025-02-11T00:00:00Z | 2025-02-11T00:00:00Z |
| opensuse-su-2025:14765-1 | netty-4.1.118-1.1 on GA media | 2025-02-11T00:00:00Z | 2025-02-11T00:00:00Z |
| opensuse-su-2025:14764-1 | libmozjs-128-0-128.7.0-1.1 on GA media | 2025-02-11T00:00:00Z | 2025-02-11T00:00:00Z |
| opensuse-su-2025:14763-1 | crun-1.20-1.1 on GA media | 2025-02-11T00:00:00Z | 2025-02-11T00:00:00Z |
| opensuse-su-2025:14762-1 | python312-mitmproxy-11.1.2-1.1 on GA media | 2025-02-10T00:00:00Z | 2025-02-10T00:00:00Z |
| opensuse-su-2025:14761-1 | python314-3.14.0~a4-1.1 on GA media | 2025-02-09T00:00:00Z | 2025-02-09T00:00:00Z |
| opensuse-su-2025:14760-1 | python313-3.13.2-1.1 on GA media | 2025-02-09T00:00:00Z | 2025-02-09T00:00:00Z |
| opensuse-su-2025:14759-1 | python312-3.12.9-1.1 on GA media | 2025-02-09T00:00:00Z | 2025-02-09T00:00:00Z |
| opensuse-su-2025:14758-1 | python310-3.10.16-2.1 on GA media | 2025-02-09T00:00:00Z | 2025-02-09T00:00:00Z |
| opensuse-su-2025:14757-1 | libopenvswitch-3_3-0-3.3.2-25.1 on GA media | 2025-02-09T00:00:00Z | 2025-02-09T00:00:00Z |
| opensuse-su-2025:14756-1 | libtasn1-6-32bit-4.20.0-1.1 on GA media | 2025-02-09T00:00:00Z | 2025-02-09T00:00:00Z |
| opensuse-su-2025:14755-1 | java-21-openj9-21.0.6.0-1.1 on GA media | 2025-02-09T00:00:00Z | 2025-02-09T00:00:00Z |
| opensuse-su-2025:14754-1 | govulncheck-vulndb-0.0.20250207T224745-1.1 on GA media | 2025-02-09T00:00:00Z | 2025-02-09T00:00:00Z |
| opensuse-su-2025:14753-1 | fq-0.14.0-1.1 on GA media | 2025-02-09T00:00:00Z | 2025-02-09T00:00:00Z |
| opensuse-su-2025:14752-1 | rime-schema-all-20230603+git.5fdd2d6-5.1 on GA media | 2025-02-09T00:00:00Z | 2025-02-09T00:00:00Z |
| opensuse-su-2025:14751-1 | python39-3.9.21-2.1 on GA media | 2025-02-08T00:00:00Z | 2025-02-08T00:00:00Z |
| opensuse-su-2025:14750-1 | python311-3.11.11-3.1 on GA media | 2025-02-08T00:00:00Z | 2025-02-08T00:00:00Z |
| opensuse-su-2025:14749-1 | java-1_8_0-openj9-1.8.0.442-1.1 on GA media | 2025-02-08T00:00:00Z | 2025-02-08T00:00:00Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| cnvd-2025-27904 | Tenda AC23 formSetIPv6status函数栈缓冲区溢出漏洞 | 2023-08-29 | 2025-11-14 |
| cnvd-2025-27903 | Tenda AC6 fast_setting_wifi_set函数堆栈缓冲区溢出漏洞 | 2025-10-24 | 2025-11-14 |
| cnvd-2025-27902 | Tenda AC6 addressNat函数堆栈缓冲区溢出漏洞 | 2025-10-24 | 2025-11-14 |
| cnvd-2025-27901 | Tenda AC23 SetVirtualServerCfg文件缓冲区溢出漏洞 | 2025-11-05 | 2025-11-14 |
| cnvd-2025-27900 | Tenda AC23 saveParentControlInfo文件缓冲区溢出漏洞 | 2025-11-05 | 2025-11-14 |
| cnvd-2025-27899 | Tenda AC8 DatabaseIniSet文件缓冲区溢出漏洞 | 2025-11-05 | 2025-11-14 |
| cnvd-2025-27897 | Tenda AC23越界写入漏洞 | 2023-02-15 | 2025-11-14 |
| cnvd-2025-27896 | Tenda AC23 sub_4781A4函数堆栈缓冲区溢出漏洞 | 2023-08-29 | 2025-11-14 |
| cnvd-2025-27895 | Tenda AC23 sub_450A4C函数缓冲区溢出漏洞 | 2023-08-29 | 2025-11-14 |
| cnvd-2025-27894 | Tenda AC23 get_parentControl_list_Info函数堆缓冲区溢出漏洞 | 2023-08-29 | 2025-11-14 |
| cnvd-2025-27889 | WordPress All in One Time Clock Lite plugin未经授权访问漏洞 | 2025-11-11 | 2025-11-14 |
| cnvd-2025-27888 | WordPress Ace User Management plugin未正确验证密码重置令牌漏洞 | 2025-11-11 | 2025-11-14 |
| cnvd-2025-27887 | WordPress WPFunnels plugin路径遍历漏洞 | 2025-11-12 | 2025-11-14 |
| cnvd-2025-27886 | WordPress WPFunnels plugin未经授权的用户注册漏洞 | 2025-11-12 | 2025-11-14 |
| cnvd-2025-27885 | WordPress WP Airbnb Review Slider plugin跨站脚本漏洞 | 2025-11-12 | 2025-11-14 |
| cnvd-2025-27884 | WordPress Smart Auto Upload Images plugin任意文件上传漏洞 | 2025-11-12 | 2025-11-14 |
| cnvd-2025-27883 | WordPress Simple Downloads List plugin未经授权的数据修改漏洞 | 2025-11-12 | 2025-11-14 |
| cnvd-2025-27882 | WordPress Ovatheme Events Manager plugin未经授权的访问漏洞 | 2025-11-12 | 2025-11-14 |
| cnvd-2025-27881 | WordPress Mang Board plugin跨站脚本漏洞 | 2025-11-12 | 2025-11-14 |
| cnvd-2025-27880 | WordPress LC Wizard plugin权限提升漏洞 | 2025-11-12 | 2025-11-14 |
| cnvd-2025-27879 | WordPress IDonate plugin不安全的直接对象引用漏洞 | 2025-11-12 | 2025-11-14 |
| cnvd-2025-27878 | WordPress Gravity Forms plugin任意文件上传漏洞 | 2025-11-12 | 2025-11-14 |
| cnvd-2025-27877 | WordPress Course Booking System plugin未授权访问数据漏洞 | 2025-11-12 | 2025-11-14 |
| cnvd-2025-27876 | WordPress Contact Form 7 AWeber Extension plugin未经授权的数据修改漏洞 | 2025-11-12 | 2025-11-14 |
| cnvd-2025-27875 | WordPress Asgaros Forum plugin SQL注入漏洞 | 2025-11-12 | 2025-11-14 |
| cnvd-2025-27874 | Inventory Management viewProduct.php文件SQL注入漏洞 | 2024-09-14 | 2025-11-13 |
| cnvd-2025-27873 | Inventory Management editProduct.php文件SQL注入漏洞 | 2024-11-21 | 2025-11-13 |
| cnvd-2025-27872 | Online Shoe Store summary.php文件SQL注入漏洞 | 2025-01-10 | 2025-11-13 |
| cnvd-2025-27871 | Online Shoe Store /login.php文件SQL注入漏洞 | 2025-01-10 | 2025-11-13 |
| cnvd-2025-27870 | Online Shoe Store details2.php文件SQL注入漏洞 | 2025-01-10 | 2025-11-13 |
| ID | Description | Published | Updated |
|---|---|---|---|
| CERTFR-2025-AVI-0551 | Vulnérabilité dans Xen | 2025-07-02T00:00:00.000000 | 2025-07-02T00:00:00.000000 |
| certfr-2025-avi-0550 | Multiples vulnérabilités dans les produits Tenable | 2025-07-01T00:00:00.000000 | 2025-07-01T00:00:00.000000 |
| certfr-2025-avi-0549 | Vulnérabilité dans Google Chrome | 2025-07-01T00:00:00.000000 | 2025-07-01T00:00:00.000000 |
| CERTFR-2025-AVI-0550 | Multiples vulnérabilités dans les produits Tenable | 2025-07-01T00:00:00.000000 | 2025-07-01T00:00:00.000000 |
| CERTFR-2025-AVI-0549 | Vulnérabilité dans Google Chrome | 2025-07-01T00:00:00.000000 | 2025-07-01T00:00:00.000000 |
| certfr-2025-avi-0548 | Multiples vulnérabilités dans MongoDB Server | 2025-06-30T00:00:00.000000 | 2025-06-30T00:00:00.000000 |
| CERTFR-2025-AVI-0548 | Multiples vulnérabilités dans MongoDB Server | 2025-06-30T00:00:00.000000 | 2025-06-30T00:00:00.000000 |
| certfr-2025-avi-0547 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2025-06-27T00:00:00.000000 | 2025-06-27T00:00:00.000000 |
| certfr-2025-avi-0546 | Multiples vulnérabilités dans les produits IBM | 2025-06-27T00:00:00.000000 | 2025-06-27T00:00:00.000000 |
| certfr-2025-avi-0545 | Multiples vulnérabilités dans le noyau Linux de Red Hat | 2025-06-27T00:00:00.000000 | 2025-06-27T00:00:00.000000 |
| certfr-2025-avi-0544 | Multiples vulnérabilités dans les produits Trend Micro | 2025-06-27T00:00:00.000000 | 2025-06-27T00:00:00.000000 |
| certfr-2025-avi-0543 | Vulnérabilité dans VMware Tanzu | 2025-06-27T00:00:00.000000 | 2025-06-27T00:00:00.000000 |
| certfr-2025-avi-0542 | Multiples vulnérabilités dans Microsoft Edge | 2025-06-27T00:00:00.000000 | 2025-06-27T00:00:00.000000 |
| CERTFR-2025-AVI-0547 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2025-06-27T00:00:00.000000 | 2025-06-27T00:00:00.000000 |
| CERTFR-2025-AVI-0546 | Multiples vulnérabilités dans les produits IBM | 2025-06-27T00:00:00.000000 | 2025-06-27T00:00:00.000000 |
| CERTFR-2025-AVI-0545 | Multiples vulnérabilités dans le noyau Linux de Red Hat | 2025-06-27T00:00:00.000000 | 2025-06-27T00:00:00.000000 |
| CERTFR-2025-AVI-0544 | Multiples vulnérabilités dans les produits Trend Micro | 2025-06-27T00:00:00.000000 | 2025-06-27T00:00:00.000000 |
| CERTFR-2025-AVI-0543 | Vulnérabilité dans VMware Tanzu | 2025-06-27T00:00:00.000000 | 2025-06-27T00:00:00.000000 |
| CERTFR-2025-AVI-0542 | Multiples vulnérabilités dans Microsoft Edge | 2025-06-27T00:00:00.000000 | 2025-06-27T00:00:00.000000 |
| certfr-2025-avi-0541 | Vulnérabilité dans Centreon Map | 2025-06-26T00:00:00.000000 | 2025-06-26T00:00:00.000000 |
| certfr-2025-avi-0540 | Multiples vulnérabilités dans les produits Citrix | 2025-06-26T00:00:00.000000 | 2025-06-26T00:00:00.000000 |
| certfr-2025-avi-0538 | Multiples vulnérabilités dans VMware Tanzu | 2025-06-26T00:00:00.000000 | 2025-06-26T00:00:00.000000 |
| CERTFR-2025-AVI-0541 | Vulnérabilité dans Centreon Map | 2025-06-26T00:00:00.000000 | 2025-06-26T00:00:00.000000 |
| CERTFR-2025-AVI-0540 | Multiples vulnérabilités dans les produits Citrix | 2025-06-26T00:00:00.000000 | 2025-06-26T00:00:00.000000 |
| CERTFR-2025-AVI-0538 | Multiples vulnérabilités dans VMware Tanzu | 2025-06-26T00:00:00.000000 | 2025-06-26T00:00:00.000000 |
| certfr-2025-avi-0537 | Multiples vulnérabilités dans GitLab | 2025-06-25T00:00:00.000000 | 2025-06-25T00:00:00.000000 |
| certfr-2025-avi-0536 | Multiples vulnérabilités dans les produits Mozilla | 2025-06-25T00:00:00.000000 | 2025-06-25T00:00:00.000000 |
| certfr-2025-avi-0535 | Vulnérabilité dans VMware Tanzu | 2025-06-25T00:00:00.000000 | 2025-06-25T00:00:00.000000 |
| certfr-2025-avi-0534 | Multiples vulnérabilités dans Google Chrome | 2025-06-25T00:00:00.000000 | 2025-06-25T00:00:00.000000 |
| certfr-2025-avi-0533 | Multiples vulnérabilités dans Elastic Kibana | 2025-06-25T00:00:00.000000 | 2025-06-25T00:00:00.000000 |