Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2020-6572 |
8.8 (3.1)
|
Use after free in Media in Google Chrome prior to… |
Google |
Chrome |
2021-01-14T20:55:23.000Z | 2026-01-12T20:35:43.810Z |
| CVE-2019-2725 |
7.5 (3.0)
|
Vulnerability in the Oracle WebLogic Server compo… |
Oracle Corporation |
Tape Library ACSLS |
2019-04-26T18:21:08.000Z | 2026-01-12T20:27:52.191Z |
| CVE-2021-31956 |
7.8 (3.1)
|
Windows NTFS Elevation of Privilege Vulnerability |
Microsoft |
Windows 10 Version 1809 |
2021-06-08T22:46:25.000Z | 2026-01-12T20:27:21.010Z |
| CVE-2021-34527 |
8.8 (3.1)
|
Windows Print Spooler Remote Code Execution Vulnerability |
Microsoft |
Windows 10 Version 1809 |
2021-07-02T21:25:11.000Z | 2026-01-12T20:26:17.732Z |
| CVE-2021-1675 |
7.8 (3.1)
|
Windows Print Spooler Remote Code Execution Vulnerability |
Microsoft |
Windows 10 Version 1809 |
2021-06-08T22:46:11.000Z | 2026-01-12T20:24:24.093Z |
| CVE-2021-41074 |
5.4 (3.1)
|
A CSRF issue in index.php in QloApps hotel eComme… |
n/a |
n/a |
2026-01-12T00:00:00.000Z | 2026-01-12T20:24:00.855Z |
| CVE-2020-14750 |
9.8 (3.1)
|
Vulnerability in the Oracle WebLogic Server produ… |
Oracle Corporation |
WebLogic Server |
2020-11-01T23:50:13.000Z | 2026-01-12T20:23:09.843Z |
| CVE-2026-21899 |
4.7 (3.1)
|
CryptoLib has an out-of-bounds read and crash vulnerab… |
nasa |
CryptoLib |
2026-01-10T00:11:18.877Z | 2026-01-12T20:23:08.304Z |
| CVE-2020-14882 |
9.8 (3.1)
|
Vulnerability in the Oracle WebLogic Server produ… |
Oracle Corporation |
WebLogic Server |
2020-10-21T14:04:30.000Z | 2026-01-12T20:22:27.460Z |
| CVE-2026-21898 |
8.2 (3.1)
|
CryptoLib Has Out-of-bounds Read in Crypto_AOS_Process… |
nasa |
CryptoLib |
2026-01-10T00:10:29.925Z | 2026-01-12T20:22:05.827Z |
| CVE-2020-14883 |
7.2 (3.1)
|
Vulnerability in the Oracle WebLogic Server produ… |
Oracle Corporation |
WebLogic Server |
2020-10-21T14:04:30.000Z | 2026-01-12T20:21:48.685Z |
| CVE-2026-21897 |
7.3 (3.1)
|
CryptoLib Has Out-of-Bounds Write in Crypto_Config_Add… |
nasa |
CryptoLib |
2026-01-10T00:07:16.920Z | 2026-01-12T20:21:22.735Z |
| CVE-2020-11738 |
7.5 (3.0)
|
The Snap Creek Duplicator plugin before 1.3.28 fo… |
n/a |
n/a |
2020-04-13T21:20:00.000Z | 2026-01-12T20:20:55.122Z |
| CVE-2023-36331 |
8.2 (3.1)
|
Incorrect access control in the /member/orderList… |
n/a |
n/a |
2026-01-12T00:00:00.000Z | 2026-01-12T20:12:16.471Z |
| CVE-2024-1249 |
7.4 (3.1)
|
Keycloak: org.keycloak.protocol.oidc: unvalidated cros… |
|
|
2024-04-17T13:22:48.335Z | 2026-01-12T20:09:01.583Z |
| CVE-2025-51567 |
9.1 (3.1)
|
A SQL Injection was found in the /exam/user/profi… |
n/a |
n/a |
2026-01-12T00:00:00.000Z | 2026-01-12T20:06:58.653Z |
| CVE-2023-32409 |
8.6 (3.1)
|
The issue was addressed with improved bounds chec… |
Apple |
macOS |
2023-06-23T00:00:00.000Z | 2026-01-12T19:59:41.495Z |
| CVE-2021-33045 |
9.8 (3.1)
|
The identity authentication bypass vulnerability … |
n/a |
Some Dahua IP Camera, Video Intercom, NVR, XVR devices |
2021-09-15T21:50:08.000Z | 2026-01-12T19:53:51.321Z |
| CVE-2021-33044 |
9.8 (3.1)
|
The identity authentication bypass vulnerability … |
n/a |
Some Dahua IP Camera, Video Intercom, PTZ Dome Camera, Thermal Camera devices |
2021-09-15T21:36:04.000Z | 2026-01-12T19:53:16.325Z |
| CVE-2025-66802 |
9.8 (3.1)
|
Sourcecodester Covid-19 Contact Tracing System 1.… |
n/a |
n/a |
2026-01-12T00:00:00.000Z | 2026-01-12T19:37:06.392Z |
| CVE-2017-6742 |
8.8 (3.0)
|
A vulnerability in the SNMP implementation of cou… |
Cisco |
Cisco IOS XE Software |
2017-07-17T21:00:00.000Z | 2026-01-12T19:25:59.489Z |
| CVE-2026-22601 |
8.6 (4.0)
|
OpenProject is Vulnerable to Code Execution in E-Mail … |
opf |
openproject |
2026-01-10T01:06:05.430Z | 2026-01-12T19:16:44.111Z |
| CVE-2026-22604 |
6.9 (4.0)
|
OpenProject is vulnerable to user enumeration via the … |
opf |
openproject |
2026-01-10T01:07:02.555Z | 2026-01-12T19:16:12.780Z |
| CVE-2026-22605 |
4.3 (3.1)
|
OpenProject is Vulnerable to Insecure Direct Object Re… |
opf |
openproject |
2026-01-10T01:07:10.412Z | 2026-01-12T19:15:27.143Z |
| CVE-2025-15501 |
9.3 (4.0)
9.8 (3.1)
9.8 (3.0)
|
Sangfor Operation and Maintenance Management System ge… |
Sangfor |
Operation and Maintenance Management System |
2026-01-09T22:32:05.839Z | 2026-01-12T19:14:37.055Z |
| CVE-2025-53470 |
N/A
|
Apache Mynewt NimBLE: Out-of-Bounds Write Vulnerabilit… |
Apache Software Foundation |
Apache Mynewt NimBLE |
2026-01-10T09:46:35.789Z | 2026-01-12T19:12:52.715Z |
| CVE-2025-52435 |
N/A
|
Apache Mynewt NimBLE: Invalid error handling in pause … |
Apache Software Foundation |
Apache Mynewt NimBLE |
2026-01-10T09:47:10.568Z | 2026-01-12T19:07:07.593Z |
| CVE-2026-22785 |
9.3 (4.0)
|
orval MCP client is vulnerable to a code injection attack. |
orval-labs |
orval |
2026-01-12T18:43:16.637Z | 2026-01-12T18:56:50.902Z |
| CVE-2026-22784 |
2.3 (4.0)
|
Lychee cross-album password propagation on Album unlocking |
LycheeOrg |
Lychee |
2026-01-12T18:37:55.183Z | 2026-01-12T18:55:55.328Z |
| CVE-2026-22783 |
9.6 (3.1)
|
Iris Allows Arbitrary File Deletion via Mass Assignmen… |
dfir-iris |
iris-web |
2026-01-12T18:27:38.259Z | 2026-01-12T18:52:04.765Z |
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2025-37176 |
6.5 (3.1)
|
Authenticated Command Injection Vulnerability in an AO… |
Hewlett Packard Enterprise (HPE) |
ArubaOS (AOS) |
2026-01-13T20:07:50.236Z | 2026-01-14T04:57:49.721Z |
| CVE-2025-37175 |
7.2 (3.1)
|
Authenticated Arbitrary File Upload Vulnerability in A… |
Hewlett Packard Enterprise (HPE) |
ArubaOS (AOS) |
2026-01-13T20:07:34.158Z | 2026-01-14T15:15:11.658Z |
| CVE-2025-37174 |
7.2 (3.1)
|
Authenticated Arbitrary File Write Vulnerability in AO… |
Hewlett Packard Enterprise (HPE) |
ArubaOS (AOS) |
2026-01-13T20:05:33.134Z | 2026-01-14T15:14:30.866Z |
| CVE-2025-37173 |
7.2 (3.1)
|
Improper Input Handling Vulnerability in Authenticated… |
Hewlett Packard Enterprise (HPE) |
ArubaOS (AOS) |
2026-01-13T20:04:57.366Z | 2026-01-14T15:12:36.694Z |
| CVE-2025-37172 |
7.2 (3.1)
|
Authenticated Command Injection Vulnerabilities in AOS… |
Hewlett Packard Enterprise (HPE) |
ArubaOS (AOS) |
2026-01-13T20:04:38.071Z | 2026-01-14T15:11:50.406Z |
| CVE-2025-37171 |
7.2 (3.1)
|
Authenticated Command Injection Vulnerabilities in AOS… |
Hewlett Packard Enterprise (HPE) |
ArubaOS (AOS) |
2026-01-13T20:04:22.468Z | 2026-01-14T15:11:30.971Z |
| CVE-2025-37170 |
7.2 (3.1)
|
Authenticated Command Injection Vulnerabilities in AOS… |
Hewlett Packard Enterprise (HPE) |
ArubaOS (AOS) |
2026-01-13T20:04:03.744Z | 2026-01-14T15:11:05.856Z |
| CVE-2025-37169 |
7.2 (3.1)
|
Stack Overflow Vulnerability in AOS-10 Web-Based Manag… |
Hewlett Packard Enterprise (HPE) |
ArubaOS (AOS) |
2026-01-13T20:03:33.822Z | 2026-01-14T04:57:40.730Z |
| CVE-2025-37166 |
7.5 (3.1)
|
Unexpected shutdown in HPE Instant On Access Points af… |
Hewlett Packard Enterprise (HPE) |
Instant On |
2026-01-13T17:42:09.716Z | 2026-01-13T19:46:16.425Z |
| CVE-2025-37165 |
7.5 (3.1)
|
Exposure of VLAN information in unintended network int… |
Hewlett Packard Enterprise (HPE) |
Instant On |
2026-01-13T17:40:56.557Z | 2026-01-15T16:56:25.947Z |
| CVE-2025-25652 |
7.5 (3.1)
|
In Eptura Archibus 2024.03.01.109, the "Run scrip… |
n/a |
n/a |
2026-01-13T00:00:00.000Z | 2026-01-14T14:40:37.786Z |
| CVE-2025-25176 |
9.1 (3.1)
|
GPU DDK - GPU Register value contents leaked from secu… |
Imagination Technologies |
Graphics DDK |
2026-01-13T16:27:40.857Z | 2026-01-14T14:38:22.165Z |
| CVE-2025-15056 |
5.1 (4.0)
|
Quill 2.0.3 - Lack of data validation in HTML export a… |
Slab |
Quill |
2026-01-13T20:39:29.627Z | 2026-01-13T21:27:56.936Z |
| CVE-2025-10865 |
7.8 (3.1)
|
GPU DDK - DevmemIntGetReservationData does not ref the… |
Imagination Technologies |
Graphics DDK |
2026-01-13T17:26:45.523Z | 2026-01-14T14:36:47.473Z |
| CVE-2020-36919 |
5.1 (4.0)
6.1 (3.1)
|
WPForms 1.7.8 - Cross-Site Scripting (XSS) |
Syed Balkhi |
WPForms |
2026-01-13T22:55:56.024Z | 2026-01-14T15:14:16.328Z |
| CVE-2026-22820 |
6.3 (4.0)
|
Outray cli is vulnerable to race conditions in tunnels… |
akinloluwami |
outray |
2026-01-14T15:06:51.127Z | 2026-01-14T15:19:46.837Z |
| CVE-2026-22718 |
6.8 (3.1)
|
Command injection vulnerability |
Spring |
CLI VSCode Extension |
2026-01-14T05:10:58.485Z | 2026-01-14T14:19:10.368Z |
| CVE-2026-22686 |
10 (3.1)
|
Sandbox Escape via Host Error Prototype Chain in enclave-vm |
agentfront |
enclave |
2026-01-13T23:11:49.098Z | 2026-01-14T14:33:18.579Z |
| CVE-2026-22240 |
10 (4.0)
|
Plaintext Passwords Vulnerability in BLUVOYIX |
Bluspark Global |
BLUVOYIX |
2026-01-14T14:42:09.919Z | 2026-01-14T14:58:59.484Z |
| CVE-2026-22239 |
10 (4.0)
|
Email Sending Vulnerability in BLUVOYIX |
Bluspark Global |
BLUVOYIX |
2026-01-14T14:40:20.516Z | 2026-01-14T14:56:01.047Z |
| CVE-2026-22238 |
10 (4.0)
|
Administrator Account Creation Vulnerability in BLUVOYIX |
Bluspark Global |
BLUVOYIX |
2026-01-14T14:38:55.583Z | 2026-01-14T15:00:10.766Z |
| CVE-2026-22237 |
10 (4.0)
|
Exposed Internal API Documentation Vulnerability in BLUVOYIX |
Bluspark Global |
BLUVOYIX |
2026-01-14T14:36:47.670Z | 2026-01-14T15:00:36.337Z |
| CVE-2026-22236 |
10 (4.0)
|
Improper Authentication Vulnerability in BLUVOYIX |
Bluspark Global |
BLUVOYIX |
2026-01-14T14:34:14.034Z | 2026-01-14T15:01:50.769Z |
| CVE-2026-22211 |
5.1 (4.0)
|
TinyOS <= 2.1.2 Global Buffer Overflow in printfUART |
TinyOS |
TinyOS |
2026-01-14T15:19:54.833Z | 2026-01-14T15:35:01.567Z |
| CVE-2026-0813 |
4.4 (3.1)
|
Short Link <= 1.0 - Authenticated (Administrator+) Sto… |
prasannasp |
Short Link |
2026-01-14T06:40:05.955Z | 2026-01-14T20:59:03.055Z |
| CVE-2026-0812 |
4.4 (3.1)
|
LinkedIn SC <= 1.1.9 - Authenticated (Administrator+) … |
guillaumev |
LinkedIn SC |
2026-01-14T06:40:05.145Z | 2026-01-14T21:47:06.478Z |
| CVE-2026-0741 |
4.4 (3.1)
|
Electric Studio Download Counter <= 2.4 - Authenticate… |
electric-studio |
Electric Studio Download Counter |
2026-01-14T06:40:06.713Z | 2026-01-14T20:48:23.806Z |
| CVE-2026-0739 |
4.4 (3.1)
|
WMF Mobile Redirector <= 1.2 - Authenticated (Administ… |
webbu |
WMF Mobile Redirector |
2026-01-14T06:40:04.088Z | 2026-01-15T17:23:06.026Z |
| CVE-2026-0734 |
4.4 (3.1)
|
WP Allowed Hosts <= 1.0.8 - Authenticated (Administrat… |
dfieldfl |
WP Allowed Hosts |
2026-01-14T06:40:05.559Z | 2026-01-14T21:01:19.790Z |
| CVE-2026-0717 |
5.3 (3.1)
|
LottieFiles – Lottie block for Gutenberg <= 3.0.0 - Un… |
lottiefile |
LottieFiles – Lottie block for Gutenberg |
2026-01-14T05:28:04.741Z | 2026-01-14T19:17:15.578Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| fkie_cve-2025-37176 | A command injection vulnerability in AOS-8 allows an authenticated privileged user to alter a packa… | 2026-01-13T20:16:05.717 | 2026-01-14T16:25:40.430 |
| fkie_cve-2025-37175 | Arbitrary file upload vulnerability exists in the web-based management interface of mobility conduc… | 2026-01-13T20:16:05.600 | 2026-01-14T16:25:40.430 |
| fkie_cve-2025-37174 | Authenticated arbitrary file write vulnerability exists in the web-based management interface of mo… | 2026-01-13T20:16:05.470 | 2026-01-14T16:25:40.430 |
| fkie_cve-2025-37173 | An improper input handling vulnerability exists in the web-based management interface of mobility c… | 2026-01-13T20:16:05.340 | 2026-01-14T16:25:40.430 |
| fkie_cve-2025-37172 | Authenticated command injection vulnerabilities exist in the web-based management interface of mobi… | 2026-01-13T20:16:05.217 | 2026-01-14T16:25:40.430 |
| fkie_cve-2025-37171 | Authenticated command injection vulnerabilities exist in the web-based management interface of mobi… | 2026-01-13T20:16:05.090 | 2026-01-14T16:25:40.430 |
| fkie_cve-2025-37170 | Authenticated command injection vulnerabilities exist in the web-based management interface of mobi… | 2026-01-13T20:16:04.963 | 2026-01-14T16:25:40.430 |
| fkie_cve-2025-37169 | A stack overflow vulnerability exists in the AOS-10 web-based management interface of a Mobility Ga… | 2026-01-13T20:16:04.830 | 2026-01-14T16:25:40.430 |
| fkie_cve-2025-37166 | A vulnerability affecting HPE Networking Instant On Access Points has been identified where a devic… | 2026-01-13T18:16:05.477 | 2026-01-14T16:25:40.430 |
| fkie_cve-2025-37165 | A vulnerability in the router mode configuration of HPE Instant On Access Points exposed certain ne… | 2026-01-13T18:16:05.330 | 2026-01-14T16:25:40.430 |
| fkie_cve-2025-25652 | In Eptura Archibus 2024.03.01.109, the "Run script" and "Server File" components of the "Database U… | 2026-01-13T17:15:57.070 | 2026-01-14T16:25:40.430 |
| fkie_cve-2025-25176 | Intermediate register values of secure workloads can be exfiltrated in workloads scheduled from app… | 2026-01-13T17:15:56.753 | 2026-01-14T16:25:40.430 |
| fkie_cve-2025-15056 | A lack of data validation vulnerability in the HTML export feature in Quill in allows Cross-Site Sc… | 2026-01-13T21:15:49.720 | 2026-01-14T16:25:40.430 |
| fkie_cve-2025-10865 | Software installed and run as a non-privileged user may conduct improper GPU system calls to cause … | 2026-01-13T18:16:04.433 | 2026-01-14T16:25:40.430 |
| fkie_cve-2020-36919 | WPForms 1.7.8 contains a cross-site scripting vulnerability in the slider import search feature and… | 2026-01-13T23:15:48.717 | 2026-01-14T16:25:40.430 |
| fkie_cve-2026-22820 | Outray openSource ngrok alternative. Prior to 0.1.5, a TOCTOU race condition vulnerability allows a… | 2026-01-14T15:16:05.663 | 2026-01-14T16:25:12.057 |
| fkie_cve-2026-22718 | The VSCode extension for Spring CLI are vulnerable to command injection, resulting in command execu… | 2026-01-14T05:16:34.570 | 2026-01-14T16:25:12.057 |
| fkie_cve-2026-22686 | Enclave is a secure JavaScript sandbox designed for safe AI agent code execution. Prior to 2.7.0, t… | 2026-01-14T00:15:49.957 | 2026-01-14T16:25:12.057 |
| fkie_cve-2026-22240 | The vulnerability exists in BLUVOYIX due to an improper password storage implementation and subsequ… | 2026-01-14T15:16:05.413 | 2026-01-14T16:25:12.057 |
| fkie_cve-2026-22239 | The vulnerability exists in BLUVOYIX due to design flaws in the email sending API. An unauthenticat… | 2026-01-14T15:16:05.260 | 2026-01-14T16:25:12.057 |
| fkie_cve-2026-22238 | The vulnerability exists in BLUVOYIX due to improper authentication in the BLUVOYIX admin APIs. An … | 2026-01-14T15:16:05.090 | 2026-01-14T16:25:12.057 |
| fkie_cve-2026-22237 | The vulnerability exists in BLUVOYIX due to the exposure of sensitive internal API documentation. A… | 2026-01-14T15:16:04.780 | 2026-01-14T16:25:12.057 |
| fkie_cve-2026-22236 | The vulnerability exists in BLUVOYIX due to improper authentication in the BLUVOYIX backend APIs. A… | 2026-01-14T15:16:04.580 | 2026-01-14T16:25:12.057 |
| fkie_cve-2026-22211 | TinyOS versions up to and including 2.1.2 contain a global buffer overflow vulnerability in the pri… | 2026-01-14T16:15:56.950 | 2026-01-14T16:25:12.057 |
| fkie_cve-2026-0813 | The Short Link plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'short_lin… | 2026-01-14T07:16:16.027 | 2026-01-14T16:25:12.057 |
| fkie_cve-2026-0812 | The LinkedIn SC plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'linkedin… | 2026-01-14T07:16:15.843 | 2026-01-14T16:25:12.057 |
| fkie_cve-2026-0741 | The Electric Studio Download Counter plugin for WordPress is vulnerable to Stored Cross-Site Script… | 2026-01-14T07:16:15.667 | 2026-01-14T16:25:12.057 |
| fkie_cve-2026-0739 | The WMF Mobile Redirector plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the… | 2026-01-14T07:16:15.487 | 2026-01-14T16:25:12.057 |
| fkie_cve-2026-0734 | The WP Allowed Hosts plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'all… | 2026-01-14T07:16:15.303 | 2026-01-14T16:25:12.057 |
| fkie_cve-2026-0717 | The LottieFiles – Lottie block for Gutenberg plugin for WordPress is vulnerable to Sensitive Inform… | 2026-01-14T06:15:55.670 | 2026-01-14T16:25:12.057 |
| ID | Severity | Description | Published | Updated |
|---|---|---|---|---|
| ghsa-mc6v-g8qv-fwmp |
7.6 (3.1)
7.2 (4.0)
|
OPEXUS eCASE Audit allows an authenticated attacker to modify client-side JavaScript or craft HTTP … | 2026-01-08T18:30:50Z | 2026-01-08T18:30:50Z |
| ghsa-m92x-4jg5-v4px |
8.8 (3.1)
|
A malicious actor in Wi-Fi range of the affected product could leverage a vulnerability in the airM… | 2026-01-08T18:30:50Z | 2026-01-08T18:30:50Z |
| ghsa-fqvg-3mcf-p6g9 |
5.3 (3.1)
|
Missing Authorization vulnerability in IdeaBox Creations Dashboard Welcome for Beaver Builder allow… | 2026-01-08T18:30:50Z | 2026-01-08T18:30:50Z |
| ghsa-9vw7-2gjw-jc6x |
5.4 (3.1)
|
A malicious actor in Wi-Fi range of the affected product could leverage a vulnerability in the airM… | 2026-01-08T18:30:50Z | 2026-01-08T18:30:50Z |
| ghsa-9rqg-238c-x4mh |
4.3 (3.1)
|
Missing Authorization vulnerability in Nawawi Jamili Docket Cache allows Exploiting Incorrectly Con… | 2026-01-08T18:30:50Z | 2026-01-08T18:30:50Z |
| ghsa-8mm8-wv67-v583 |
4.3 (3.1)
|
Missing Authorization vulnerability in baqend Speed Kit allows Exploiting Incorrectly Configured Ac… | 2026-01-08T18:30:50Z | 2026-01-08T18:30:50Z |
| ghsa-859g-62gq-28q4 |
6.5 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2026-01-08T18:30:50Z | 2026-01-08T18:30:50Z |
| ghsa-7cgr-2c4h-cvgf |
5.5 (3.1)
4.8 (4.0)
|
OPEXUS eCASE Audit allows an authenticated attacker to save JavaScript as a comment within the Docu… | 2026-01-08T18:30:50Z | 2026-01-08T18:30:50Z |
| ghsa-65cr-c32f-9764 |
5.3 (3.1)
|
Missing Authorization vulnerability in Hakob Re Gallery & Responsive Photo Gallery Plugin allows Ex… | 2026-01-08T18:30:50Z | 2026-01-08T18:30:50Z |
| ghsa-466m-2qm3-2495 |
5.5 (3.1)
4.8 (4.0)
|
Ideagen DevonWay contains a stored cross site scripting vulnerability. A remote, authenticated atta… | 2026-01-08T18:30:50Z | 2026-01-08T18:30:50Z |
| ghsa-xjhh-pfph-2w9v |
6.1 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2026-01-08T12:30:31Z | 2026-01-08T18:30:49Z |
| ghsa-x2cc-cqcm-pm2j |
6.5 (3.1)
|
An issue in GL Inet GL.Inet AX1800 Version 4.6.4 & 4.6.8 are vulnerable. GL.Inet AX1800 Version 4.6… | 2026-01-08T18:30:49Z | 2026-01-08T18:30:49Z |
| ghsa-wxm8-fmqv-9x7q |
8.1 (3.1)
|
A command injection vulnerability exists in the GL-iNet GL-AXT1800 router firmware v4.6.8. The vuln… | 2026-01-08T18:30:49Z | 2026-01-08T18:30:49Z |
| ghsa-v5cj-mgwg-2f9f |
5.4 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2026-01-08T12:30:31Z | 2026-01-08T18:30:49Z |
| ghsa-pv5v-2jwc-r845 |
7.1 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2026-01-08T12:30:31Z | 2026-01-08T18:30:49Z |
| ghsa-m8r3-25j5-pg42 |
7.1 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2026-01-08T12:30:31Z | 2026-01-08T18:30:49Z |
| ghsa-jjmx-7vpw-fcc5 |
5.1 (3.1)
|
The LuCI web interface on Gl Inet GL.Inet AX1800 Version 4.6.4 & 4.6.8 are vulnerable. Fix availabl… | 2026-01-08T18:30:49Z | 2026-01-08T18:30:49Z |
| ghsa-hxwj-3426-mwmr |
7.1 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2026-01-08T12:30:31Z | 2026-01-08T18:30:49Z |
| ghsa-hjvr-2r84-cx23 |
7.0 (4.0)
|
A Improper Neutralization of Argument Delimiters vulnerability in Foomuuri can lead to integrity lo… | 2026-01-08T18:30:49Z | 2026-01-08T18:30:49Z |
| ghsa-g9j8-54mc-h6rm |
6.5 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2026-01-08T12:30:31Z | 2026-01-08T18:30:49Z |
| ghsa-9cr2-xp3m-5wqw |
7.8 (3.1)
|
This vulnerability allows a Backup or Tape Operator to perform remote code execution (RCE) as root … | 2026-01-08T18:30:49Z | 2026-01-08T18:30:49Z |
| ghsa-87pc-4c9h-ggc4 |
9.0 (3.1)
|
This vulnerability allows a Backup Operator to perform remote code execution (RCE) as the postgres … | 2026-01-08T18:30:49Z | 2026-01-08T18:30:49Z |
| ghsa-4j9w-6jcv-v8mp |
7.1 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2026-01-08T12:30:31Z | 2026-01-08T18:30:49Z |
| ghsa-48mv-p55r-f874 |
9.0 (3.1)
|
This vulnerability allows a Backup Administrator to perform remote code execution (RCE) as the post… | 2026-01-08T18:30:49Z | 2026-01-08T18:30:49Z |
| ghsa-3xgw-97m8-xp2p |
8.7 (3.1)
|
Cross-Site Scripting in phpgurukul Hostel Management System v2.1 user-provided complaint fields (Ex… | 2026-01-08T18:30:49Z | 2026-01-08T18:30:49Z |
| ghsa-388c-fp3f-fvcv |
9.0 (3.1)
|
This vulnerability allows a Backup or Tape Operator to write files as root. | 2026-01-08T18:30:49Z | 2026-01-08T18:30:49Z |
| ghsa-365v-v88v-6gwg |
6.1 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2026-01-08T12:30:31Z | 2026-01-08T18:30:49Z |
| ghsa-24qf-fgjm-mfxj |
6.1 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2026-01-08T12:30:31Z | 2026-01-08T18:30:49Z |
| ghsa-xxh6-2g83-jp5x |
9.8 (3.1)
|
Unrestricted Upload of File with Dangerous Type vulnerability in contentstudio Contentstudio conten… | 2026-01-08T12:30:30Z | 2026-01-08T18:30:48Z |
| ghsa-xww5-2rwh-r562 |
6.1 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2026-01-08T12:30:30Z | 2026-01-08T18:30:48Z |
| ID | Severity | Description | Package | Published | Updated |
|---|---|---|---|---|---|
| pysec-2021-483 |
|
TensorFlow is an end-to-end open source platform for machine learning. An attacker can ca… | tensorflow-cpu | 2021-05-14T20:15:00Z | 2021-12-09T06:34:51.920437Z |
| pysec-2021-482 |
|
TensorFlow is an end-to-end open source platform for machine learning. An attacker can ca… | tensorflow-cpu | 2021-05-14T19:15:00Z | 2021-12-09T06:34:51.766391Z |
| pysec-2021-481 |
|
TensorFlow is an end-to-end open source platform for machine learning. An attacker can re… | tensorflow-cpu | 2021-05-14T20:15:00Z | 2021-12-09T06:34:51.614588Z |
| pysec-2021-480 |
|
TensorFlow is an end-to-end open source platform for machine learning. An attacker can ca… | tensorflow-cpu | 2021-05-14T20:15:00Z | 2021-12-09T06:34:51.420468Z |
| pysec-2021-479 |
|
TensorFlow is an end-to-end open source platform for machine learning. The implementation… | tensorflow-cpu | 2021-05-14T20:15:00Z | 2021-12-09T06:34:51.250544Z |
| pysec-2021-478 |
|
TensorFlow is an end-to-end open source platform for machine learning. An attacker can ca… | tensorflow-cpu | 2021-05-14T20:15:00Z | 2021-12-09T06:34:51.099370Z |
| pysec-2021-477 |
|
TensorFlow is an end-to-end open source platform for machine learning. An attacker can ca… | tensorflow-cpu | 2021-05-14T20:15:00Z | 2021-12-09T06:34:50.949292Z |
| pysec-2021-476 |
|
TensorFlow is an end-to-end open source platform for machine learning. An attacker can ca… | tensorflow-cpu | 2021-05-14T20:15:00Z | 2021-12-09T06:34:50.800401Z |
| pysec-2021-475 |
|
TensorFlow is an end-to-end open source platform for machine learning. An attacker can ca… | tensorflow-cpu | 2021-05-14T20:15:00Z | 2021-12-09T06:34:50.647185Z |
| pysec-2021-474 |
|
TensorFlow is an end-to-end open source platform for machine learning. An attacker can tr… | tensorflow-cpu | 2021-05-14T20:15:00Z | 2021-12-09T06:34:50.495115Z |
| pysec-2021-473 |
|
TensorFlow is an end-to-end open source platform for machine learning. An attacker can tr… | tensorflow-cpu | 2021-05-14T20:15:00Z | 2021-12-09T06:34:50.345149Z |
| pysec-2021-472 |
|
TensorFlow is an end-to-end open source platform for machine learning. An attacker can tr… | tensorflow-cpu | 2021-05-14T20:15:00Z | 2021-12-09T06:34:50.195889Z |
| pysec-2021-471 |
|
TensorFlow is an end-to-end open source platform for machine learning. An attacker can tr… | tensorflow-cpu | 2021-05-14T20:15:00Z | 2021-12-09T06:34:50.046503Z |
| pysec-2021-470 |
|
TensorFlow is an end-to-end open source platform for machine learning. An attacker can ca… | tensorflow-cpu | 2021-05-14T20:15:00Z | 2021-12-09T06:34:49.894355Z |
| pysec-2021-469 |
|
TensorFlow is an end-to-end open source platform for machine learning. An attacker can tr… | tensorflow-cpu | 2021-05-14T20:15:00Z | 2021-12-09T06:34:49.747683Z |
| pysec-2021-468 |
|
TensorFlow is an end-to-end open source platform for machine learning. An attacker can ca… | tensorflow-cpu | 2021-05-14T20:15:00Z | 2021-12-09T06:34:49.596439Z |
| pysec-2021-467 |
|
TensorFlow is an end-to-end open source platform for machine learning. Calling `tf.raw_op… | tensorflow-cpu | 2021-05-14T20:15:00Z | 2021-12-09T06:34:49.452107Z |
| pysec-2021-466 |
|
TensorFlow is an end-to-end open source platform for machine learning. An attacker can ca… | tensorflow-cpu | 2021-05-14T20:15:00Z | 2021-12-09T06:34:49.257791Z |
| pysec-2021-465 |
|
TensorFlow is an end-to-end open source platform for machine learning. An attacker can ca… | tensorflow-cpu | 2021-05-14T20:15:00Z | 2021-12-09T06:34:49.104886Z |
| pysec-2021-464 |
|
TensorFlow is an end-to-end open source platform for machine learning. An attacker can ca… | tensorflow-cpu | 2021-05-14T20:15:00Z | 2021-12-09T06:34:48.953620Z |
| pysec-2021-463 |
|
TensorFlow is an end-to-end open source platform for machine learning. An attacker can ca… | tensorflow-cpu | 2021-05-14T20:15:00Z | 2021-12-09T06:34:48.800365Z |
| pysec-2021-462 |
|
TensorFlow is an end-to-end open source platform for machine learning. An attacker can tr… | tensorflow-cpu | 2021-05-14T20:15:00Z | 2021-12-09T06:34:48.648836Z |
| pysec-2021-461 |
|
TensorFlow is an end-to-end open source platform for machine learning. An attacker can tr… | tensorflow-cpu | 2021-05-14T20:15:00Z | 2021-12-09T06:34:48.500169Z |
| pysec-2021-460 |
|
TensorFlow is an end-to-end open source platform for machine learning. An attacker can fo… | tensorflow-cpu | 2021-05-14T20:15:00Z | 2021-12-09T06:34:48.349137Z |
| pysec-2021-459 |
|
TensorFlow is an end-to-end open source platform for machine learning. An attacker can tr… | tensorflow-cpu | 2021-05-14T20:15:00Z | 2021-12-09T06:34:48.199089Z |
| pysec-2021-458 |
|
TensorFlow is an end-to-end open source platform for machine learning. An attacker can tr… | tensorflow-cpu | 2021-05-14T20:15:00Z | 2021-12-09T06:34:48.047849Z |
| pysec-2021-457 |
|
TensorFlow is an end-to-end open source platform for machine learning. An attacker can tr… | tensorflow-cpu | 2021-05-14T20:15:00Z | 2021-12-09T06:34:47.879310Z |
| pysec-2021-456 |
|
TensorFlow is an end-to-end open source platform for machine learning. An attacker can tr… | tensorflow-cpu | 2021-05-14T20:15:00Z | 2021-12-09T06:34:47.721328Z |
| pysec-2021-455 |
|
TensorFlow is an end-to-end open source platform for machine learning. An attacker can tr… | tensorflow-cpu | 2021-05-14T20:15:00Z | 2021-12-09T06:34:47.577181Z |
| pysec-2021-454 |
|
TensorFlow is an end-to-end open source platform for machine learning. An attacker can tr… | tensorflow-cpu | 2021-05-14T20:15:00Z | 2021-12-09T06:34:47.426864Z |
| ID | Description | Updated |
|---|---|---|
| gsd-2024-3783 | The Backup Agents section in WBSAirback 21.02.04 is affected by a Path Traversal vulnerab… | 2024-04-16T05:01:59.533875Z |
| gsd-2024-3782 | Cross-Site Request Forgery vulnerability in WBSAirback 21.02.04, which could allow an att… | 2024-04-16T05:01:59.775101Z |
| gsd-2024-3781 | Command injection vulnerability in the operating system. Improper neutralisation of speci… | 2024-04-16T05:01:59.559921Z |
| gsd-2024-3780 | A vulnerability of Information Exposure has been found on Technicolor CGA2121 affecting t… | 2024-04-16T05:01:59.797051Z |
| gsd-2024-3779 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-16T05:01:59.684604Z |
| gsd-2024-32604 | Authorization Bypass Through User-Controlled Key vulnerability in Plechev Andrey WP-Recal… | 2024-04-16T05:01:54.692595Z |
| gsd-2024-32603 | Deserialization of Untrusted Data vulnerability in ThemeKraft WooBuddy.This issue affects… | 2024-04-16T05:01:54.702090Z |
| gsd-2024-32602 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vuln… | 2024-04-16T05:01:54.717563Z |
| gsd-2024-32601 | Missing Authorization vulnerability in WP OnlineSupport, Essential Plugin Popup Anything.… | 2024-04-16T05:01:54.603461Z |
| gsd-2024-32600 | Deserialization of Untrusted Data vulnerability in Averta Master Slider.This issue affect… | 2024-04-16T05:01:54.599191Z |
| gsd-2024-32599 | Improper Control of Generation of Code ('Code Injection') vulnerability in Deepak anand W… | 2024-04-16T05:01:54.650918Z |
| gsd-2024-32598 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vuln… | 2024-04-16T05:01:54.700392Z |
| gsd-2024-32597 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vuln… | 2024-04-16T05:01:54.658590Z |
| gsd-2024-32596 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vuln… | 2024-04-16T05:01:54.602047Z |
| gsd-2024-32595 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vuln… | 2024-04-16T05:01:54.607048Z |
| gsd-2024-32594 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vuln… | 2024-04-16T05:01:54.674984Z |
| gsd-2024-32593 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vuln… | 2024-04-16T05:01:54.679922Z |
| gsd-2024-32592 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vuln… | 2024-04-16T05:01:54.579522Z |
| gsd-2024-32591 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vuln… | 2024-04-16T05:01:54.622040Z |
| gsd-2024-32590 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vuln… | 2024-04-16T05:01:54.681804Z |
| gsd-2024-32589 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-16T05:01:54.578090Z |
| gsd-2024-32588 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vuln… | 2024-04-16T05:01:54.604699Z |
| gsd-2024-32587 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vuln… | 2024-04-16T05:01:54.642307Z |
| gsd-2024-32586 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vuln… | 2024-04-16T05:01:54.717307Z |
| gsd-2024-32585 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vuln… | 2024-04-16T05:01:54.722518Z |
| gsd-2024-32584 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vuln… | 2024-04-16T05:01:54.598992Z |
| gsd-2024-32583 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vuln… | 2024-04-16T05:01:54.638287Z |
| gsd-2024-32582 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vuln… | 2024-04-16T05:01:54.604505Z |
| gsd-2024-32581 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vuln… | 2024-04-16T05:01:54.611418Z |
| gsd-2024-32580 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vuln… | 2024-04-16T05:01:54.708066Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| MAL-2025-2731 | Malicious code in ethers-provider2 (npm) | 2025-03-26T17:27:08Z | 2025-12-24T10:09:27Z |
| MAL-2025-191572 | Malicious code in cwanner (npm) | 2025-12-01T13:06:26Z | 2025-12-24T10:09:27Z |
| MAL-2025-191569 | Malicious code in cookie-validate (npm) | 2025-12-01T13:05:53Z | 2025-12-24T10:09:27Z |
| MAL-2024-2370 | Malicious code in financialtimes-classic (npm) | 2024-06-25T12:43:03Z | 2025-12-24T10:09:27Z |
| MAL-2024-10974 | Malicious code in etherscancontracthandler (npm) | 2024-11-26T23:52:16Z | 2025-12-24T10:09:27Z |
| mal-2025-5074 | Malicious code in build-react-wrapper (npm) | 2025-06-18T10:23:35Z | 2025-12-24T10:09:26Z |
| mal-2025-49380 | Malicious code in chai-await-test (npm) | 2025-11-07T03:52:52Z | 2025-12-24T10:09:26Z |
| mal-2025-41538 | Malicious code in bsd-ui-stylekit (npm) | 2025-08-28T07:23:31Z | 2025-12-24T10:09:26Z |
| mal-2025-191567 | Malicious code in chai-sync (npm) | 2025-12-01T13:05:09Z | 2025-12-24T10:09:26Z |
| mal-2025-191566 | Malicious code in chai-promise-chain (npm) | 2025-12-01T13:05:08Z | 2025-12-24T10:09:26Z |
| mal-2025-190634 | Malicious code in @validate-pubkey/hex (npm) | 2025-11-24T05:47:56Z | 2025-12-24T10:09:26Z |
| mal-2025-190624 | Malicious code in base62-58x (npm) | 2025-11-24T03:27:37Z | 2025-12-24T10:09:26Z |
| mal-2025-190599 | Malicious code in @vreden-team/baileys (npm) | 2025-11-21T03:58:09Z | 2025-12-24T10:09:26Z |
| mal-2025-1721 | Malicious code in amazon-test (npm) | 2025-03-03T13:15:56Z | 2025-12-24T10:09:26Z |
| mal-2025-149905 | Malicious code in aes-core-valid-ipherv (npm) | 2025-11-12T06:10:33Z | 2025-12-24T10:09:26Z |
| mal-2024-11326 | Malicious code in ccs-react-lib (npm) | 2024-12-08T23:12:10Z | 2025-12-24T10:09:26Z |
| MAL-2025-5074 | Malicious code in build-react-wrapper (npm) | 2025-06-18T10:23:35Z | 2025-12-24T10:09:26Z |
| MAL-2025-49380 | Malicious code in chai-await-test (npm) | 2025-11-07T03:52:52Z | 2025-12-24T10:09:26Z |
| MAL-2025-41538 | Malicious code in bsd-ui-stylekit (npm) | 2025-08-28T07:23:31Z | 2025-12-24T10:09:26Z |
| MAL-2025-191567 | Malicious code in chai-sync (npm) | 2025-12-01T13:05:09Z | 2025-12-24T10:09:26Z |
| MAL-2025-191566 | Malicious code in chai-promise-chain (npm) | 2025-12-01T13:05:08Z | 2025-12-24T10:09:26Z |
| MAL-2025-190634 | Malicious code in @validate-pubkey/hex (npm) | 2025-11-24T05:47:56Z | 2025-12-24T10:09:26Z |
| MAL-2025-190624 | Malicious code in base62-58x (npm) | 2025-11-24T03:27:37Z | 2025-12-24T10:09:26Z |
| MAL-2025-190599 | Malicious code in @vreden-team/baileys (npm) | 2025-11-21T03:58:09Z | 2025-12-24T10:09:26Z |
| MAL-2025-1721 | Malicious code in amazon-test (npm) | 2025-03-03T13:15:56Z | 2025-12-24T10:09:26Z |
| MAL-2025-149905 | Malicious code in aes-core-valid-ipherv (npm) | 2025-11-12T06:10:33Z | 2025-12-24T10:09:26Z |
| MAL-2024-11326 | Malicious code in ccs-react-lib (npm) | 2024-12-08T23:12:10Z | 2025-12-24T10:09:26Z |
| mal-2025-49331 | Malicious code in 8jfiesaf83 (npm) | 2025-11-03T18:59:00Z | 2025-12-24T10:09:25Z |
| mal-2025-47916 | Malicious code in @hash-validator/v2 (npm) | 2025-10-07T00:21:42Z | 2025-12-24T10:09:25Z |
| mal-2025-47913 | Malicious code in @bs58-utils/wrapper (npm) | 2025-10-07T00:21:42Z | 2025-12-24T10:09:25Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| wid-sec-w-2025-0858 | cPanel/WHM: Mehrere Schwachstellen | 2025-04-21T22:00:00.000+00:00 | 2025-04-28T22:00:00.000+00:00 |
| wid-sec-w-2025-0854 | Broadcom Fabric OS: Schwachstelle ermöglicht Codeausführung als "root" | 2025-04-21T22:00:00.000+00:00 | 2025-04-28T22:00:00.000+00:00 |
| wid-sec-w-2025-0442 | Linux Kernel: Schwachstelle ermöglicht Codeausführung | 2025-02-25T23:00:00.000+00:00 | 2025-04-28T22:00:00.000+00:00 |
| wid-sec-w-2025-0893 | JetBrains TeamCity: Mehrere Schwachstellen | 2025-04-27T22:00:00.000+00:00 | 2025-04-27T22:00:00.000+00:00 |
| wid-sec-w-2025-0890 | Rancher: Schwachstelle ermöglicht Privilegieneskalation | 2025-04-27T22:00:00.000+00:00 | 2025-04-27T22:00:00.000+00:00 |
| wid-sec-w-2025-0888 | Red Hat JBoss Enterprise Application Platform: Schwachstelle ermöglicht Denial of Service | 2021-08-18T22:00:00.000+00:00 | 2025-04-27T22:00:00.000+00:00 |
| wid-sec-w-2025-0799 | Google Chrome und Microsoft Edge: Mehrere Schwachstellen | 2025-04-15T22:00:00.000+00:00 | 2025-04-27T22:00:00.000+00:00 |
| wid-sec-w-2024-3532 | Red Hat JBoss Enterprise Application Platform: Schwachstelle ermöglicht Denial of Service | 2022-02-02T23:00:00.000+00:00 | 2025-04-27T22:00:00.000+00:00 |
| wid-sec-w-2024-0910 | Red Hat Single Sign On: Mehrere Schwachstellen ermöglichen Umgehen von Sicherheitsvorkehrungen | 2024-04-16T22:00:00.000+00:00 | 2025-04-27T22:00:00.000+00:00 |
| wid-sec-w-2023-2200 | poppler: Schwachstelle ermöglicht Denial of Service | 2023-08-28T22:00:00.000+00:00 | 2025-04-27T22:00:00.000+00:00 |
| wid-sec-w-2023-2171 | poppler: Mehrere Schwachstellen ermöglichen Denial of Service | 2023-08-24T22:00:00.000+00:00 | 2025-04-27T22:00:00.000+00:00 |
| wid-sec-w-2023-2051 | poppler: Mehrere Schwachstellen | 2023-08-13T22:00:00.000+00:00 | 2025-04-27T22:00:00.000+00:00 |
| wid-sec-w-2023-1584 | Red Hat Single Sign On: Mehrere Schwachstellen | 2023-06-27T22:00:00.000+00:00 | 2025-04-27T22:00:00.000+00:00 |
| wid-sec-w-2023-0209 | Red Hat Integration Camel Extensions for Quarkus: Mehrere Schwachstellen ermöglichen Denial of Service | 2023-01-26T23:00:00.000+00:00 | 2025-04-27T22:00:00.000+00:00 |
| wid-sec-w-2022-1635 | Red Hat OpenShift und Red Hat Enterprise Linux: Mehrere Schwachstellen ermöglichen Denial of Service | 2022-10-05T22:00:00.000+00:00 | 2025-04-27T22:00:00.000+00:00 |
| wid-sec-w-2022-0771 | Apache XML-Security for Java: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen | 2021-09-19T22:00:00.000+00:00 | 2025-04-27T22:00:00.000+00:00 |
| wid-sec-w-2022-0726 | Red Hat JBoss Enterprise Application Platform: Mehrere Schwachstellen ermöglichen Denial of Service | 2021-11-15T23:00:00.000+00:00 | 2025-04-27T22:00:00.000+00:00 |
| wid-sec-w-2022-0105 | Apache ActiveMQ: Schwachstelle ermöglicht Denial of Service | 2022-02-03T23:00:00.000+00:00 | 2025-04-27T22:00:00.000+00:00 |
| wid-sec-w-2025-0887 | VMware Tanzu Spring Boot: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen | 2025-04-24T22:00:00.000+00:00 | 2025-04-24T22:00:00.000+00:00 |
| wid-sec-w-2025-0884 | Acronis Cyber Protect (Cloud Agent): Mehrere Schwachstellen | 2025-04-24T22:00:00.000+00:00 | 2025-04-24T22:00:00.000+00:00 |
| wid-sec-w-2025-0883 | IBM Maximo Asset Management: Schwachstelle ermöglicht Cross-Site Scripting | 2025-04-24T22:00:00.000+00:00 | 2025-04-24T22:00:00.000+00:00 |
| wid-sec-w-2025-0865 | Ruby: Schwachstelle ermöglicht Manipulation von Dateien | 2013-01-07T23:00:00.000+00:00 | 2025-04-24T22:00:00.000+00:00 |
| wid-sec-w-2025-0719 | SAP Patchday April 2025: Mehrere Schwachstellen | 2025-04-07T22:00:00.000+00:00 | 2025-04-24T22:00:00.000+00:00 |
| wid-sec-w-2024-2153 | Apple iOS und iPadOS: Mehrere Schwachstellen | 2024-09-16T22:00:00.000+00:00 | 2025-04-24T22:00:00.000+00:00 |
| wid-sec-w-2025-0881 | Drupal Extensions: Mehrere Schwachstellen | 2025-04-23T22:00:00.000+00:00 | 2025-04-23T22:00:00.000+00:00 |
| wid-sec-w-2025-0880 | GitLab: Mehrere Schwachstellen | 2025-04-23T22:00:00.000+00:00 | 2025-04-23T22:00:00.000+00:00 |
| wid-sec-w-2025-0878 | IBM InfoSphere Information Server: Mehrere Schwachstellen | 2025-04-23T22:00:00.000+00:00 | 2025-04-23T22:00:00.000+00:00 |
| wid-sec-w-2025-0876 | Proxmox Virtual Environment: Schwachstelle ermöglicht Manipulation von Dateien | 2025-04-23T22:00:00.000+00:00 | 2025-04-23T22:00:00.000+00:00 |
| wid-sec-w-2025-0874 | SonicWall SSL-VPN: Schwachstelle ermöglicht Denial of Service | 2025-04-23T22:00:00.000+00:00 | 2025-04-23T22:00:00.000+00:00 |
| wid-sec-w-2025-0856 | Proxmox Virtual Environment: Mehrere Schwachstellen | 2025-04-21T22:00:00.000+00:00 | 2025-04-23T22:00:00.000+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| rhsa-2025:22800 | Red Hat Security Advisory: kernel-rt security update | 2025-12-08T03:01:46+00:00 | 2026-01-14T20:49:36+00:00 |
| rhsa-2025:21083 | Red Hat Security Advisory: kernel security update | 2025-11-12T05:21:13+00:00 | 2026-01-14T20:49:32+00:00 |
| rhsa-2025:21084 | Red Hat Security Advisory: kernel security update | 2025-11-12T05:26:07+00:00 | 2026-01-14T20:49:28+00:00 |
| rhsa-2025:21082 | Red Hat Security Advisory: kernel-rt security update | 2025-11-12T04:28:37+00:00 | 2026-01-14T20:49:27+00:00 |
| rhsa-2025:21063 | Red Hat Security Advisory: kernel security update | 2025-11-12T02:44:58+00:00 | 2026-01-14T20:49:26+00:00 |
| rhsa-2025:19104 | Red Hat Security Advisory: kernel security update | 2025-10-27T16:41:00+00:00 | 2026-01-14T20:49:25+00:00 |
| rhsa-2025:19886 | Red Hat Security Advisory: kernel security update | 2025-11-06T09:16:12+00:00 | 2026-01-14T20:49:23+00:00 |
| rhsa-2025:19492 | Red Hat Security Advisory: kernel security update | 2025-11-03T16:00:14+00:00 | 2026-01-14T20:49:22+00:00 |
| rhsa-2025:19268 | Red Hat Security Advisory: kernel-rt security update | 2025-10-29T15:15:40+00:00 | 2026-01-14T20:49:21+00:00 |
| rhsa-2025:18298 | Red Hat Security Advisory: kernel-rt security update | 2025-10-20T02:35:50+00:00 | 2026-01-14T20:49:20+00:00 |
| rhsa-2025:18297 | Red Hat Security Advisory: kernel security update | 2025-10-20T02:48:20+00:00 | 2026-01-14T20:49:15+00:00 |
| rhsa-2025:17760 | Red Hat Security Advisory: kernel security update | 2025-10-13T04:28:03+00:00 | 2026-01-14T20:49:09+00:00 |
| rhsa-2025:21492 | Red Hat Security Advisory: kernel security update | 2025-11-17T10:31:28+00:00 | 2026-01-14T20:31:33+00:00 |
| rhsa-2025:21463 | Red Hat Security Advisory: kernel security update | 2025-11-17T08:34:08+00:00 | 2026-01-14T20:31:33+00:00 |
| rhsa-2024:4823 | Red Hat Security Advisory: kernel security update | 2024-07-24T13:20:26+00:00 | 2026-01-14T20:31:23+00:00 |
| rhsa-2024:1404 | Red Hat Security Advisory: kernel security and bug fix update | 2024-03-19T17:43:32+00:00 | 2026-01-14T20:31:22+00:00 |
| rhsa-2023:0832 | Red Hat Security Advisory: kernel security and bug fix update | 2023-02-21T09:26:03+00:00 | 2026-01-14T20:31:16+00:00 |
| rhsa-2025:9581 | Red Hat Security Advisory: kernel-rt security update | 2025-06-25T00:18:50+00:00 | 2026-01-14T20:03:10+00:00 |
| rhsa-2025:9580 | Red Hat Security Advisory: kernel security update | 2025-06-25T00:40:16+00:00 | 2026-01-14T20:03:07+00:00 |
| rhsa-2025:6966 | Red Hat Security Advisory: kernel security update | 2025-05-13T08:28:50+00:00 | 2026-01-14T20:03:03+00:00 |
| rhsa-2025:23789 | Red Hat Security Advisory: kernel security update | 2025-12-22T03:25:22+00:00 | 2026-01-14T19:50:38+00:00 |
| rhsa-2025:23000 | Red Hat Security Advisory: kernel security update | 2025-12-10T01:02:52+00:00 | 2026-01-14T19:50:33+00:00 |
| rhsa-2025:22865 | Red Hat Security Advisory: kernel security update | 2025-12-09T08:56:00+00:00 | 2026-01-14T19:50:29+00:00 |
| rhsa-2025:22854 | Red Hat Security Advisory: kernel security update | 2025-12-09T08:51:05+00:00 | 2026-01-14T19:50:28+00:00 |
| rhsa-2025:22405 | Red Hat Security Advisory: kernel security update | 2025-12-01T11:06:22+00:00 | 2026-01-14T19:50:25+00:00 |
| rhsa-2025:19447 | Red Hat Security Advisory: kernel security update | 2025-11-03T09:44:18+00:00 | 2026-01-14T19:50:09+00:00 |
| rhsa-2025:19440 | Red Hat Security Advisory: kernel-rt security update | 2025-11-03T09:06:28+00:00 | 2026-01-14T19:50:09+00:00 |
| rhsa-2025:19222 | Red Hat Security Advisory: kernel security update | 2025-10-29T00:46:08+00:00 | 2026-01-14T19:50:08+00:00 |
| rhsa-2025:18932 | Red Hat Security Advisory: kernel security update | 2025-10-22T00:27:35+00:00 | 2026-01-14T19:50:05+00:00 |
| rhsa-2025:17812 | Red Hat Security Advisory: kernel-rt security update | 2025-10-13T18:15:30+00:00 | 2026-01-14T19:50:03+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| icsa-24-011-08 | Siemens SICAM A8000 | 2024-01-09T00:00:00Z | 2024-01-09T00:00:00Z |
| icsa-24-011-07 | Siemens Spectrum Power 7 | 2024-01-09T00:00:00Z | 2024-01-09T00:00:00Z |
| icsa-24-011-06 | Siemens Teamcenter Visualization and JT2Go | 2024-01-09T00:00:00Z | 2024-01-09T00:00:00Z |
| icsa-23-348-13 | Siemens SICAM Q100 Devices | 2023-12-12T00:00:00.000000Z | 2024-01-09T00:00:00.000000Z |
| icsa-22-314-11 | Siemens SICAM Q100 | 2022-11-08T00:00:00.000000Z | 2024-01-09T00:00:00.000000Z |
| icsa-22-104-05 | Siemens OpenSSL Vulnerabilities in Industrial Products | 2021-07-13T00:00:00.000000Z | 2024-01-09T00:00:00.000000Z |
| icsa-24-004-02 | Mitsubishi Electric Factory Automation Products | 2024-01-04T07:00:00.000000Z | 2024-01-04T07:00:00.000000Z |
| icsa-24-004-01 | Rockwell Automation FactoryTalk Activation | 2024-01-04T07:00:00.000000Z | 2024-01-04T07:00:00.000000Z |
| icsa-23-348-15 | Unitronics Vision and Samba Series (Update A) | 2023-12-14T07:00:00.000000Z | 2024-01-04T07:00:00.000000Z |
| icsa-23-355-02 | QNAP VioStor NVR | 2023-12-21T07:00:00.000000Z | 2023-12-21T07:00:00.000000Z |
| icsa-23-355-01 | FXC AE1021/AE1021PE | 2023-12-21T07:00:00.000000Z | 2023-12-21T07:00:00.000000Z |
| icsa-24-331-05 | Hitachi Energy RTU500 Scripting Interface | 2023-12-19T13:30:00.000000Z | 2023-12-19T13:30:00.000000Z |
| icsa-23-353-05 | EuroTel ETL3100 Radio Transmitter | 2023-12-19T07:00:00.000000Z | 2023-12-19T07:00:00.000000Z |
| icsa-23-353-04 | Open Design Alliance Drawing SDK | 2023-12-19T07:00:00.000000Z | 2023-12-19T07:00:00.000000Z |
| icsa-23-353-03 | EFACEC UC 500E | 2023-12-19T07:00:00.000000Z | 2023-12-19T07:00:00.000000Z |
| icsa-23-353-02 | EFACEC BCU 500 | 2023-12-19T07:00:00.000000Z | 2023-12-19T07:00:00.000000Z |
| icsa-23-353-01 | Subnet Solutions Inc. PowerSYSTEM Center | 2023-12-19T07:00:00.000000Z | 2023-12-19T07:00:00.000000Z |
| icsa-23-341-03 | Johnson Controls Metasys and Facility Explorer (Update A) | 2023-12-07T07:00:00.000000Z | 2023-12-19T07:00:00.000000Z |
| icsma-20-254-01 | Philips Patient Monitoring Devices (Update C) | 2020-09-10T06:00:00.000000Z | 2023-12-14T07:00:00.000000Z |
| icsa-23-348-02 | Johnson Controls Kantech Gen1 ioSmart | 2023-12-14T07:00:00.000000Z | 2023-12-14T07:00:00.000000Z |
| icsa-23-346-01 | Schneider Electric Easy UPS Online Monitoring Software | 2023-12-12T07:00:00.000000Z | 2023-12-12T07:00:00.000000Z |
| icsa-23-348-16 | Siemens SINEC INS | 2023-12-12T00:00:00Z | 2023-12-12T00:00:00Z |
| icsa-23-348-07 | Siemens SIMATIC STEP 7 (TIA Portal) | 2023-12-12T00:00:00Z | 2023-12-12T00:00:00Z |
| icsa-23-348-06 | Siemens OPC UA Implementation in SINUMERIK ONE and SINUMERIK MC | 2023-12-12T00:00:00Z | 2023-12-12T00:00:00Z |
| icsa-23-348-05 | Siemens SIMATIC and SIPLUS Products | 2023-12-12T00:00:00Z | 2023-12-12T00:00:00Z |
| icsa-21-103-09 | Siemens LOGO! Soft Comfort | 2021-04-13T00:00:00.000000Z | 2023-12-12T00:00:00.000000Z |
| icsa-19-344-03 | Siemens RUGGEDCOM ROS (Update A) | 2019-12-10T00:00:00.000000Z | 2023-12-12T00:00:00.000000Z |
| icsa-23-341-06 | Sierra Wireless AirLink with ALEOS firmware | 2023-12-07T07:00:00.000000Z | 2023-12-07T07:00:00.000000Z |
| icsa-23-341-05 | ControlbyWeb Relay | 2023-12-07T07:00:00.000000Z | 2023-12-07T07:00:00.000000Z |
| icsa-23-341-02 | Schweitzer Engineering Laboratories SEL-411L | 2023-12-07T07:00:00.000000Z | 2023-12-07T07:00:00.000000Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| cisco-sa-asr5k-autho-bypass-mjdf5s7n | Cisco ASR 5000 Series Software Authorization Bypass Vulnerabilities | 2021-06-02T16:00:00+00:00 | 2021-06-02T16:00:00+00:00 |
| cisco-sa-asr5k-autho-bypass-mJDF5S7n | Cisco ASR 5000 Series Software Authorization Bypass Vulnerabilities | 2021-06-02T16:00:00+00:00 | 2021-06-02T16:00:00+00:00 |
| cisco-sa-CSPC-CIV-kDuBfNfu | Cisco Common Services Platform Collector Command Injection Vulnerability | 2021-06-02T16:00:00+00:00 | 2021-06-02T16:00:00+00:00 |
| cisco-sa-anyconnect-ipc-kfqo9qhk | Cisco AnyConnect Secure Mobility Client Arbitrary Code Execution Vulnerability | 2020-11-04T16:00:00+00:00 | 2021-05-21T18:06:37+00:00 |
| cisco-sa-anyconnect-ipc-KfQO9QhK | Cisco AnyConnect Secure Mobility Client Arbitrary Code Execution Vulnerability | 2020-11-04T16:00:00+00:00 | 2021-05-21T18:06:37+00:00 |
| cisco-sa-http-fp-bp-kfddcqhc | Multiple Cisco Products Snort HTTP Detection Engine File Policy Bypass Vulnerabilities | 2021-04-28T16:00:00+00:00 | 2021-05-20T18:51:31+00:00 |
| cisco-sa-http-fp-bp-KfDdcQhc | Multiple Cisco Products Snort HTTP Detection Engine File Policy Bypass Vulnerabilities | 2021-04-28T16:00:00+00:00 | 2021-05-20T18:51:31+00:00 |
| cisco-sa-snort-tfo-bypass-mmzzrtes | Multiple Cisco Products Snort TCP Fast Open File Policy Bypass Vulnerability | 2021-01-13T16:00:00+00:00 | 2021-05-20T13:27:19+00:00 |
| cisco-sa-snort-tfo-bypass-MmzZrtes | Multiple Cisco Products Snort TCP Fast Open File Policy Bypass Vulnerability | 2021-01-13T16:00:00+00:00 | 2021-05-20T13:27:19+00:00 |
| cisco-sa-20190515-nxos-cli-bypass | Cisco NX-OS Software CLI Bypass to Internal Service Vulnerability | 2019-05-16T16:00:00+00:00 | 2021-05-19T20:31:16+00:00 |
| cisco-sa-pi-epnm-cmd-inj-yu5e6tb3 | Cisco Prime Infrastructure and Cisco Evolved Programmable Network Manager Command Injection Vulnerability | 2021-05-19T16:00:00+00:00 | 2021-05-19T16:00:00+00:00 |
| cisco-sa-pi-epnm-cmd-inj-YU5e6tB3 | Cisco Prime Infrastructure and Cisco Evolved Programmable Network Manager Command Injection Vulnerability | 2021-05-19T16:00:00+00:00 | 2021-05-19T16:00:00+00:00 |
| cisco-sa-finesse-strd-xss-bukqfffw | Cisco Finesse Cross-Site Scripting Vulnerabilities | 2021-05-19T16:00:00+00:00 | 2021-05-19T16:00:00+00:00 |
| cisco-sa-finesse-strd-xss-bUKqffFW | Cisco Finesse Cross-Site Scripting Vulnerabilities | 2021-05-19T16:00:00+00:00 | 2021-05-19T16:00:00+00:00 |
| cisco-sa-finesse-opn-rdrct-epdeh7r | Cisco Finesse Open Redirect Vulnerability | 2021-05-19T16:00:00+00:00 | 2021-05-19T16:00:00+00:00 |
| cisco-sa-finesse-opn-rdrct-epDeh7R | Cisco Finesse Open Redirect Vulnerability | 2021-05-19T16:00:00+00:00 | 2021-05-19T16:00:00+00:00 |
| cisco-sa-dnasp-conn-prvesc-q6t6bzw | Cisco DNA Spaces Connector Privilege Escalation Vulnerabilities | 2021-05-19T16:00:00+00:00 | 2021-05-19T16:00:00+00:00 |
| cisco-sa-dnasp-conn-prvesc-q6T6BzW | Cisco DNA Spaces Connector Privilege Escalation Vulnerabilities | 2021-05-19T16:00:00+00:00 | 2021-05-19T16:00:00+00:00 |
| cisco-sa-dnasp-conn-cmdinj-hoj4yv5n | Cisco DNA Spaces Connector Command Injection Vulnerabilities | 2021-05-19T16:00:00+00:00 | 2021-05-19T16:00:00+00:00 |
| cisco-sa-dnasp-conn-cmdinj-HOj4YV5n | Cisco DNA Spaces Connector Command Injection Vulnerabilities | 2021-05-19T16:00:00+00:00 | 2021-05-19T16:00:00+00:00 |
| cisco-sa-cml-cmd-inject-n4vyeqxb | Cisco Modeling Labs Web UI Command Injection Vulnerability | 2021-05-19T16:00:00+00:00 | 2021-05-19T16:00:00+00:00 |
| cisco-sa-cml-cmd-inject-N4VYeQXB | Cisco Modeling Labs Web UI Command Injection Vulnerability | 2021-05-19T16:00:00+00:00 | 2021-05-19T16:00:00+00:00 |
| cisco-sa-cuic-xss-u2wtsug6 | Cisco Unified Intelligence Center Reflected Cross-Site Scripting Vulnerability | 2021-04-07T16:00:00+00:00 | 2021-05-17T18:18:37+00:00 |
| cisco-sa-cuic-xss-U2WTsUg6 | Cisco Unified Intelligence Center Reflected Cross-Site Scripting Vulnerability | 2021-04-07T16:00:00+00:00 | 2021-05-17T18:18:37+00:00 |
| cisco-sa-ucm-dos-oo4sryef | Cisco Hosted Collaboration Mediation Fulfillment Denial of Service Vulnerability | 2021-05-05T16:00:00+00:00 | 2021-05-13T14:42:31+00:00 |
| cisco-sa-ucm-dos-OO4SRYEf | Cisco Hosted Collaboration Mediation Fulfillment Denial of Service Vulnerability | 2021-05-05T16:00:00+00:00 | 2021-05-13T14:42:31+00:00 |
| cisco-sa-hyperflex-upload-ktck8ugz | Cisco HyperFlex HX Data Platform File Upload Vulnerability | 2021-05-05T16:00:00+00:00 | 2021-05-07T13:44:21+00:00 |
| cisco-sa-hyperflex-upload-KtCK8Ugz | Cisco HyperFlex HX Data Platform File Upload Vulnerability | 2021-05-05T16:00:00+00:00 | 2021-05-07T13:44:21+00:00 |
| cisco-sa-wsa-xss-mvjowchb | Cisco Web Security Appliance Cross-Site Scripting Vulnerability | 2021-05-05T16:00:00+00:00 | 2021-05-05T16:00:00+00:00 |
| cisco-sa-wsa-xss-mVjOWchB | Cisco Web Security Appliance Cross-Site Scripting Vulnerability | 2021-05-05T16:00:00+00:00 | 2021-05-05T16:00:00+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| msrc_cve-2020-8561 | Webhook redirect in kube-apiserver | 2021-09-02T00:00:00.000Z | 2025-10-01T23:11:07.000Z |
| msrc_cve-2020-7071 | FILTER_VALIDATE_URL accepts URLs with invalid userinfo | 2021-02-02T00:00:00.000Z | 2025-10-01T23:11:07.000Z |
| msrc_cve-2020-4041 | The filename of uploaded files vulnerable to stored XSS in Bolt CMS | 2020-06-02T00:00:00.000Z | 2025-10-01T23:11:07.000Z |
| msrc_cve-2020-4040 | CSRF issue on preview pages in Bolt CMS | 2020-06-02T00:00:00.000Z | 2025-10-01T23:11:06.000Z |
| msrc_cve-2020-35504 | A NULL pointer dereference flaw was found in the SCSI emulation support of QEMU in versions before 6.0.0. This flaw allows a privileged guest user to crash the QEMU process on the host, resulting in a denial of service. The highest threat from this vulnerability is to system availability. | 2021-05-02T00:00:00.000Z | 2025-10-01T23:11:06.000Z |
| msrc_cve-2020-35503 | A NULL pointer dereference flaw was found in the megasas-gen2 SCSI host bus adapter emulation of QEMU in versions before and including 6.0. This issue occurs in the megasas_command_cancelled() callback function while dropping a SCSI request. This flaw allows a privileged guest user to crash the QEMU process on the host, resulting in a denial of service. The highest threat from this vulnerability is to system availability. | 2021-06-02T00:00:00.000Z | 2025-10-01T23:11:06.000Z |
| msrc_cve-2020-28925 | Bolt before 3.7.2 does not restrict filter options in a Request in the Twig context, and is therefore inconsistent with the "How to Harden Your PHP for Better Security" guidance. | 2020-12-02T00:00:00.000Z | 2025-10-01T23:11:05.000Z |
| msrc_cve-2020-27748 | A flaw was found in the xdg-email component of xdg-utils-1.1.0-rc1 and newer. When handling mailto: URIs, xdg-email allows attachments to be discreetly added via the URI when being passed to Thunderbird. An attacker could potentially send a victim a URI that automatically attaches a sensitive file to a new email. If a victim user does not notice that an attachment was added and sends the email, this could result in sensitive information disclosure. It has been confirmed that the code behind this issue is in xdg-email and not in Thunderbird. | 2021-06-02T00:00:00.000Z | 2025-10-01T23:11:05.000Z |
| msrc_cve-2020-26159 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Further investigation showed that it was not a security issue. Notes: none | 2020-09-02T00:00:00.000Z | 2025-10-01T23:11:05.000Z |
| msrc_cve-2020-25207 | JetBrains ToolBox before version 1.18 is vulnerable to Remote Code Execution via a browser protocol handler. | 2020-11-02T00:00:00.000Z | 2025-10-01T23:11:05.000Z |
| msrc_cve-2020-25013 | JetBrains ToolBox before version 1.18 is vulnerable to a Denial of Service attack via a browser protocol handler. | 2020-11-02T00:00:00.000Z | 2025-10-01T23:11:04.000Z |
| msrc_cve-2020-17527 | Apache Tomcat: Request header mix-up between HTTP/2 streams | 2020-12-02T00:00:00.000Z | 2025-10-01T23:11:04.000Z |
| msrc_cve-2020-14150 | GNU Bison before 3.5.4 allows attackers to cause a denial of service (application crash). NOTE: there is a risk only if Bison is used with untrusted input, and an observed bug happens to cause unsafe behavior with a specific compiler/architecture. The bug reports were intended to show that a crash may occur in Bison itself, not that a crash may occur in code that is generated by Bison. | 2020-06-02T00:00:00.000Z | 2025-10-01T23:11:04.000Z |
| msrc_cve-2020-12825 | libcroco through 0.6.13 has excessive recursion in cr_parser_parse_any_core in cr-parser.c, leading to stack consumption. | 2020-05-02T00:00:00.000Z | 2025-10-01T23:11:04.000Z |
| msrc_cve-2019-9192 | In the GNU C Library (aka glibc or libc6) through 2.29, check_dst_limits_calc_pos_1 in posix/regexec.c has Uncontrolled Recursion | 2019-02-02T00:00:00.000Z | 2025-10-01T23:11:03.000Z |
| msrc_cve-2019-9185 | Controller/Async/FilesystemManager.php in the filemanager in Bolt allows remote attacke | 2019-03-02T00:00:00.000Z | 2025-10-01T23:11:03.000Z |
| msrc_cve-2019-18368 | In JetBrains Toolbox App before 1.15.5666 for Windows, privilege escalation was possible. | 2019-10-02T00:00:00.000Z | 2025-10-01T23:11:03.000Z |
| msrc_cve-2019-17414 | tinylcy Vino through 2017-12-15 allows remote attackers to cause a denial of service ("vn_get_string error: Resource temporarily unavailable" error and daemon crash) via a long URL. | 2019-10-02T00:00:00.000Z | 2025-10-01T23:11:03.000Z |
| msrc_cve-2019-15485 | Bolt before 3.6.10 has XSS via createFolder or createFile in Controller/Async/FilesystemManager.php | 2019-08-02T00:00:00.000Z | 2025-10-01T23:11:02.000Z |
| msrc_cve-2019-15484 | Bolt before 3.6.10 has XSS via an image's alt or title field. | 2019-08-02T00:00:00.000Z | 2025-10-01T23:11:02.000Z |
| msrc_cve-2019-15483 | Bolt before 3.6.10 has XSS via a title that is mishandled in the system log | 2019-08-02T00:00:00.000Z | 2025-10-01T23:11:02.000Z |
| msrc_cve-2019-14959 | JetBrains Toolbox before 1.15.5605 was resolving an internal URL via a cleartext http connection. | 2019-10-02T00:00:00.000Z | 2025-10-01T23:11:02.000Z |
| msrc_cve-2019-12280 | PC-Doctor Toolbox before 7.3 has an Uncontrolled Search Path Element. | 2019-06-02T00:00:00.000Z | 2025-10-01T23:11:01.000Z |
| msrc_cve-2018-25078 | man-db before 2.8.5 on Gentoo allows local users (with access to the man user account) to gain root privileges because /usr/bin/mandb is executed by root but not owned by root. (Also, the owner can strip the setuid and setgid bits.) | 2023-01-04T00:00:00.000Z | 2025-10-01T23:11:01.000Z |
| msrc_cve-2018-20225 | An issue was discovered in pip (all versions) because it installs the version with the highest version number, even if the user had intended to obtain a private package from a private index. This only affects use of the --extra-index-url option, and exploitation requires that the package does not already exist in the public index (and thus the attacker can put the package there with an arbitrary version number). NOTE: it has been reported that this is intended functionality and the user is responsible for using --extra-index-url securely | 2020-05-02T00:00:00.000Z | 2025-10-01T23:11:01.000Z |
| msrc_cve-2018-14628 | An information leak vulnerability was discovered in Samba's LDAP server. Due to missing access control checks, an authenticated but unprivileged attacker could discover the names and preserved attributes of deleted objects in the LDAP store. | 2023-01-04T00:00:00.000Z | 2025-10-01T23:11:01.000Z |
| msrc_cve-2018-10195 | lrzsz before version 0.12.21~rc can leak information to the receiving side due to an incorrect length check in the function zsdata that causes a size_t to wrap around. | 2021-06-02T00:00:00.000Z | 2025-10-01T23:11:00.000Z |
| msrc_cve-2017-9120 | PHP 7.x through 7.1.5 allows remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a long string because of an Integer overflow in mysqli_real_escape_string. | 2018-08-02T00:00:00.000Z | 2025-10-01T23:11:00.000Z |
| msrc_cve-2017-9118 | PHP 7.1.5 has an Out of bounds access in php_pcre_replace_impl via a crafted preg_replace call. | 2018-08-02T00:00:00.000Z | 2025-10-01T23:11:00.000Z |
| msrc_cve-2017-8923 | The zend_string_extend function in Zend/zend_string.h in PHP through 7.1.5 does not prevent changes to string objects that result in a negative length, which allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact by leveraging a script's use of .= with a long string. | 2017-05-02T00:00:00.000Z | 2025-10-01T23:11:00.000Z |
| ID | Description | Updated |
|---|---|---|
| var-202404-0244 | A vulnerability was found in Tenda FH1206 1.2.0.8(8155) and classified as critical. This … | 2024-06-05T23:24:25.973000Z |
| var-202404-0181 | A vulnerability has been found in Tenda W30E 1.0.1.25(633) and classified as critical. Th… | 2024-06-05T23:24:25.988000Z |
| var-201708-1539 | An issue was discovered in SMA Solar Technology products. The SMAdata2+ communication pro… | 2024-06-05T23:24:01.267000Z |
| var-202404-0329 | A vulnerability was found in Tenda F1202 1.2.0.20(408). It has been rated as critical. Th… | 2024-06-05T23:23:48.882000Z |
| var-202404-0308 | A vulnerability was found in Tenda W15E 15.11.0.14 and classified as critical. This issue… | 2024-06-05T23:23:48.897000Z |
| var-202311-0698 | An improper access control vulnerability exists in RT-AC87U all versions. An attacker may… | 2024-06-05T23:22:49.183000Z |
| var-202404-0384 | A vulnerability was found in Tenda AC8 16.03.34.09. It has been rated as critical. This i… | 2024-06-05T23:22:48.547000Z |
| var-202404-0324 | A vulnerability, which was classified as critical, was found in Tenda W15E 15.11.0.14. Th… | 2024-06-05T23:22:08.885000Z |
| var-202108-0937 | Null Pointer Dereference vulnerability in D-Link DIR-825 2.10b02, which could let a remot… | 2024-06-05T23:20:20.327000Z |
| var-202404-2158 | A vulnerability was found in Tenda W9 1.0.0.7(4456). It has been classified as critical. … | 2024-06-05T23:20:07.704000Z |
| var-202404-2116 | A vulnerability was found in Tenda A301 15.13.08.12_multi_TDE01. It has been rated as cri… | 2024-06-05T23:20:07.720000Z |
| var-202404-2095 | A vulnerability classified as critical has been found in Tenda W9 1.0.0.7(4456). Affected… | 2024-06-05T23:20:07.736000Z |
| var-201708-1538 | An issue was discovered in SMA Solar Technology products. Sniffed passwords from SMAdata2… | 2024-06-05T23:18:07.639000Z |
| var-202405-0137 | A vulnerability, which was classified as critical, has been found in Tenda i21 1.0.0.14(4… | 2024-06-05T23:17:51.162000Z |
| var-202404-0070 | ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability, which was classified as critical, was fo… | 2024-06-05T23:17:51.328000Z |
| var-202404-0069 | ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability, which was classified as very critical, h… | 2024-06-05T23:17:51.346000Z |
| var-201912-1320 | The Lever PDF Embedder plugin 4.4 for WordPress does not block the distribution of polygl… | 2024-06-05T23:15:30.442000Z |
| var-202404-2111 | A vulnerability was found in Tenda i21 1.0.0.14(4656) and classified as critical. This is… | 2024-06-05T23:15:13.055000Z |
| var-202404-2090 | A vulnerability was found in Tenda W9 1.0.0.7(4456). It has been rated as critical. This … | 2024-06-05T23:15:13.071000Z |
| var-202404-0290 | A vulnerability was found in Tenda TX9 22.03.02.10. It has been rated as critical. Affect… | 2024-06-05T23:15:13.147000Z |
| var-202404-0164 | A vulnerability was found in Tenda W20E 15.11.0.6. It has been declared as critical. This… | 2024-06-05T23:15:13.180000Z |
| var-202309-0942 | ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability, which was classified as critical, was fo… | 2024-06-05T23:11:01.008000Z |
| var-202309-0932 | ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability, which was classified as critical, was fo… | 2024-06-05T23:11:00.930000Z |
| var-202404-2106 | A vulnerability classified as problematic was found in Netgear DG834Gv5 1.6.01.34. This v… | 2024-06-05T23:10:59.337000Z |
| var-200110-0258 | OpenSSL 0.9.7 before 0.9.7l and 0.9.8 before 0.9.8d allows remote attackers to cause a de… | 2024-06-05T22:57:21.246000Z |
| var-200609-1034 | The Security Framework in Apple Mac OS X 10.3.x up to 10.3.9 does not properly prioritize… | 2024-06-05T21:58:52.479000Z |
| var-202307-2004 | It is identified a format string vulnerability in ASUS RT-AX56U V2 & RT-AC86U. This vuln… | 2024-06-02T23:03:59.433000Z |
| var-202305-2074 | A CWE-319: Cleartext transmission of sensitive information vulnerability exists that cou… | 2024-06-02T23:03:59.712000Z |
| var-202405-3772 | EG2000CE is an intelligent router. EG2000CE of Beijing Xingwang Ruijie Network Technolog… | 2024-06-02T23:03:57.240000Z |
| var-202405-2040 | ER5100G2 is a new generation enterprise-class Gigabit wired router. H3C ER5100G2 system … | 2024-06-02T23:01:42.303000Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| jvndb-2016-000003 | H2O vulnerable to HTTP header injection | 2016-01-15T13:57+09:00 | 2016-01-27T17:33+09:00 |
| jvndb-2016-000002 | acmailer vulnerable to OS command injection | 2016-01-15T13:57+09:00 | 2016-01-27T17:20+09:00 |
| jvndb-2015-000195 | WL-330NUL vulnerable to cross-site scripting | 2015-12-09T14:51+09:00 | 2016-01-13T17:37+09:00 |
| jvndb-2015-000194 | WL-330NUL vulnerable to denial-of-service (DoS) | 2015-12-09T14:47+09:00 | 2016-01-13T17:37+09:00 |
| jvndb-2015-000193 | WL-330NUL vulnerable to remote command execution | 2015-12-09T14:41+09:00 | 2016-01-13T17:37+09:00 |
| jvndb-2015-000192 | WL-330NUL information management vulnerability | 2015-12-09T14:38+09:00 | 2016-01-13T17:37+09:00 |
| jvndb-2015-000189 | p++BBS vulnerable to cross-site scripting | 2015-11-30T13:44+09:00 | 2016-01-07T16:17+09:00 |
| jvndb-2015-000200 | Welcart vulnerable to SQL injection | 2015-12-17T15:19+09:00 | 2016-01-07T15:37+09:00 |
| jvndb-2015-000199 | WinRAR may insecurely load executable files | 2015-12-17T15:19+09:00 | 2016-01-07T15:36+09:00 |
| jvndb-2015-000188 | Frame high-speed chat vulnerable to cross-site scripting | 2015-11-30T13:44+09:00 | 2016-01-07T15:34+09:00 |
| jvndb-2015-000203 | CG-WLNCM4G may behave as an open resolver | 2015-12-25T14:45+09:00 | 2016-01-07T15:32+09:00 |
| jvndb-2015-000202 | CG-WLBARAGM may behave as an open proxy | 2015-12-25T14:45+09:00 | 2016-01-07T15:32+09:00 |
| jvndb-2015-000201 | CG-WLBARGS does not properly perform authentication | 2015-12-25T14:33+09:00 | 2016-01-07T15:32+09:00 |
| jvndb-2015-000196 | Web Analytics Service vulnerable to cross-site scripting | 2015-12-08T14:29+09:00 | 2016-01-07T15:13+09:00 |
| jvndb-2015-006129 | Multiple Cross-site Scripting Vulnerabilities in EUR | 2015-12-17T16:18+09:00 | 2015-12-28T13:54+09:00 |
| jvndb-2014-000126 | QNAP QTS vulnerable to OS command injection | 2014-10-28T14:39+09:00 | 2015-12-25T13:47+09:00 |
| jvndb-2015-000124 | Apache Struts vulnerable to cross-site scripting | 2015-09-04T15:12+09:00 | 2015-12-25T13:45+09:00 |
| jvndb-2015-006054 | XML External Entity (XXE) Vulnerability in Hitachi Command Suite | 2015-12-01T15:59+09:00 | 2015-12-22T17:43+09:00 |
| jvndb-2015-000142 | Apache Cordova plugin cordova-plugin-file-transfer vulnerable to HTTP header injection | 2015-09-29T14:04+09:00 | 2015-12-21T17:45+09:00 |
| jvndb-2015-005234 | Adobe Flash Player issue where iframe contents may be overwritten | 2015-12-17T15:19+09:00 | 2015-12-17T15:19+09:00 |
| jvndb-2015-000187 | Apache Cordova vulnerable to improper application of whitelist restrictions | 2015-11-27T13:29+09:00 | 2015-11-27T13:29+09:00 |
| jvndb-2015-000182 | Kirby vulnerable to arbitrary file creation | 2015-11-17T14:21+09:00 | 2015-11-24T18:03+09:00 |
| jvndb-2015-000179 | applican vulnerable to script injection | 2015-11-17T14:20+09:00 | 2015-11-24T18:03+09:00 |
| jvndb-2015-000178 | applican vulnerable to script injection | 2015-11-17T14:20+09:00 | 2015-11-24T18:03+09:00 |
| jvndb-2015-000184 | Void vulnerable to cross-site scripting | 2015-11-20T13:38+09:00 | 2015-11-24T18:02+09:00 |
| jvndb-2015-005909 | ArcSight Management Center and ArcSight Logger vulnerable to cross-site scripting | 2015-11-20T13:31+09:00 | 2015-11-20T13:31+09:00 |
| jvndb-2015-000180 | pWebManager vulnerable to OS command injection | 2015-11-13T14:25+09:00 | 2015-11-17T16:21+09:00 |
| jvndb-2015-000177 | Apple OS X authentication issue when recovering from sleep mode | 2015-11-13T14:25+09:00 | 2015-11-17T16:15+09:00 |
| jvndb-2015-000166 | EC-CUBE vulnerable to cross-site request forgery | 2015-10-26T12:27+09:00 | 2015-11-13T19:36+09:00 |
| jvndb-2015-000159 | Party Track SDK for iOS fails to verify server certificates | 2015-10-14T15:41+09:00 | 2015-11-11T17:32+09:00 |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| suse-su-2025:02206-1 | Security update for xorg-x11-server | 2025-07-02T15:15:37Z | 2025-07-02T15:15:37Z |
| suse-su-2025:02205-1 | Security update for python-requests | 2025-07-02T15:15:15Z | 2025-07-02T15:15:15Z |
| suse-ru-2025:02204-1 | Recommended update for aws-nitro-enclaves-cli | 2025-07-02T13:42:39Z | 2025-07-02T13:42:39Z |
| suse-ru-2025:02203-1 | Recommended update for aws-nitro-enclaves-cli | 2025-07-02T13:42:27Z | 2025-07-02T13:42:27Z |
| suse-su-2025:02201-1 | Security update for clamav | 2025-07-02T13:04:36Z | 2025-07-02T13:04:36Z |
| suse-su-2025:02200-1 | Security update for clamav | 2025-07-02T13:03:38Z | 2025-07-02T13:03:38Z |
| suse-su-2025:02198-1 | Security update for runc | 2025-07-02T09:22:54Z | 2025-07-02T09:22:54Z |
| suse-su-2025:20463-1 | Security update for python-cryptography | 2025-07-02T08:19:47Z | 2025-07-02T08:19:47Z |
| suse-su-2025:20462-1 | Security update for python-setuptools | 2025-07-02T08:15:01Z | 2025-07-02T08:15:01Z |
| suse-su-2025:02192-1 | Security update for xorg-x11-server | 2025-07-01T15:07:21Z | 2025-07-01T15:07:21Z |
| suse-su-2025:02191-1 | Security update for xwayland | 2025-07-01T15:06:49Z | 2025-07-01T15:06:49Z |
| suse-su-2025:02190-1 | Security update for redis | 2025-07-01T15:06:36Z | 2025-07-01T15:06:36Z |
| suse-su-2025:02189-1 | Security update for ImageMagick | 2025-07-01T11:48:41Z | 2025-07-01T11:48:41Z |
| suse-su-2025:02188-1 | Security update for ImageMagick | 2025-07-01T11:48:28Z | 2025-07-01T11:48:28Z |
| suse-su-2025:02187-1 | Security update for xwayland | 2025-07-01T11:48:12Z | 2025-07-01T11:48:12Z |
| suse-su-2025:02186-1 | Security update for screen | 2025-07-01T11:48:02Z | 2025-07-01T11:48:02Z |
| suse-su-2025:20456-1 | Security update for perl | 2025-07-01T11:42:56Z | 2025-07-01T11:42:56Z |
| suse-su-2025:20459-1 | Security update for containerd | 2025-07-01T11:27:44Z | 2025-07-01T11:27:44Z |
| suse-ru-2025:20460-1 | Recommended update for gpg2 | 2025-07-01T11:27:44Z | 2025-07-01T11:27:44Z |
| suse-su-2025:02184-1 | Security update for jakarta-commons-fileupload | 2025-07-01T08:14:12Z | 2025-07-01T08:14:12Z |
| suse-su-2025:02179-1 | Security update for sudo | 2025-06-30T17:54:12Z | 2025-06-30T17:54:12Z |
| suse-su-2025:02178-1 | Security update for sudo | 2025-06-30T17:53:50Z | 2025-06-30T17:53:50Z |
| suse-su-2025:02177-1 | Security update for sudo | 2025-06-30T17:53:06Z | 2025-06-30T17:53:06Z |
| suse-su-2025:02175-1 | Security update for sudo | 2025-06-30T14:32:28Z | 2025-06-30T14:32:28Z |
| suse-su-2025:02174-1 | Security update for sudo | 2025-06-30T14:31:32Z | 2025-06-30T14:31:32Z |
| suse-su-2025:02173-1 | Security update for the Linux Kernel | 2025-06-30T13:01:36Z | 2025-06-30T13:01:36Z |
| suse-su-2025:20455-1 | Security update for python-requests | 2025-06-30T12:29:07Z | 2025-06-30T12:29:07Z |
| suse-su-2025:20458-1 | Security update for gpg2 | 2025-06-30T08:30:22Z | 2025-06-30T08:30:22Z |
| suse-su-2025:20454-1 | Security update for gpg2 | 2025-06-30T08:20:23Z | 2025-06-30T08:20:23Z |
| suse-su-2025:02171-1 | Security update for the Linux Kernel (Live Patch 19 for SLE 15 SP5) | 2025-06-30T08:04:10Z | 2025-06-30T08:04:10Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| opensuse-su-2024:0212-1 | Security update for chromium | 2024-07-22T09:12:53Z | 2024-07-22T09:12:53Z |
| opensuse-su-2024:0211-1 | Security update for caddy | 2024-07-22T09:11:35Z | 2024-07-22T09:11:35Z |
| opensuse-su-2024:0210-1 | Security update for global | 2024-07-22T09:11:32Z | 2024-07-22T09:11:32Z |
| opensuse-su-2024:14214-1 | corepack20-20.15.1-1.1 on GA media | 2024-07-22T00:00:00Z | 2024-07-22T00:00:00Z |
| opensuse-su-2024:14213-1 | java-22-openjdk-22.0.2.0-1.1 on GA media | 2024-07-22T00:00:00Z | 2024-07-22T00:00:00Z |
| opensuse-su-2024:14212-1 | git-2.45.2-2.1 on GA media | 2024-07-22T00:00:00Z | 2024-07-22T00:00:00Z |
| opensuse-su-2024:14211-1 | gh-2.53.0-1.1 on GA media | 2024-07-22T00:00:00Z | 2024-07-22T00:00:00Z |
| opensuse-su-2024:0206-1 | Security update for cockpit | 2024-07-21T12:01:36Z | 2024-07-21T12:01:36Z |
| opensuse-su-2024:0205-1 | Security update for opera | 2024-07-20T18:01:28Z | 2024-07-20T18:01:28Z |
| opensuse-su-2024:14210-1 | weblate-5.6.2-1.1 on GA media | 2024-07-19T00:00:00Z | 2024-07-19T00:00:00Z |
| opensuse-su-2024:14209-1 | python310-sentry-sdk-2.10.0-1.1 on GA media | 2024-07-19T00:00:00Z | 2024-07-19T00:00:00Z |
| opensuse-su-2024:14208-1 | python310-Django4-4.2.14-1.1 on GA media | 2024-07-19T00:00:00Z | 2024-07-19T00:00:00Z |
| opensuse-su-2024:14207-1 | java-21-openjdk-21.0.4.0-1.1 on GA media | 2024-07-19T00:00:00Z | 2024-07-19T00:00:00Z |
| opensuse-su-2024:14206-1 | java-11-openjdk-11.0.24.0-1.1 on GA media | 2024-07-19T00:00:00Z | 2024-07-19T00:00:00Z |
| opensuse-su-2024:14205-1 | chromedriver-126.0.6478.182-1.1 on GA media | 2024-07-19T00:00:00Z | 2024-07-19T00:00:00Z |
| opensuse-su-2024:0204-1 | Security update for chromium | 2024-07-18T18:10:25Z | 2024-07-18T18:10:25Z |
| opensuse-su-2024:14204-1 | xen-4.18.2_06-2.1 on GA media | 2024-07-18T00:00:00Z | 2024-07-18T00:00:00Z |
| opensuse-su-2024:14203-1 | python310-Django-5.0.7-2.1 on GA media | 2024-07-18T00:00:00Z | 2024-07-18T00:00:00Z |
| opensuse-su-2024:14202-1 | java-17-openjdk-17.0.12.0-1.1 on GA media | 2024-07-18T00:00:00Z | 2024-07-18T00:00:00Z |
| opensuse-su-2024:14201-1 | gnome-extensions-46.3.1-2.1 on GA media | 2024-07-18T00:00:00Z | 2024-07-18T00:00:00Z |
| opensuse-su-2024:14200-1 | OpenImageIO-2.5.13.1-1.1 on GA media | 2024-07-18T00:00:00Z | 2024-07-18T00:00:00Z |
| opensuse-su-2024:0203-1 | Security update for znc | 2024-07-17T12:06:08Z | 2024-07-17T12:06:08Z |
| opensuse-su-2024:14199-1 | ovmf-202402-1.1 on GA media | 2024-07-17T00:00:00Z | 2024-07-17T00:00:00Z |
| opensuse-su-2024:14198-1 | istioctl-1.22.3-1.1 on GA media | 2024-07-17T00:00:00Z | 2024-07-17T00:00:00Z |
| opensuse-su-2024:14197-1 | MozillaFirefox-128.0-1.1 on GA media | 2024-07-17T00:00:00Z | 2024-07-17T00:00:00Z |
| opensuse-su-2024:0201-1 | Security update for Botan | 2024-07-16T06:28:15Z | 2024-07-16T06:28:15Z |
| opensuse-su-2024:14196-1 | exim-4.98-1.1 on GA media | 2024-07-16T00:00:00Z | 2024-07-16T00:00:00Z |
| opensuse-su-2024:14195-1 | openCryptoki-3.23.0-4.1 on GA media | 2024-07-15T00:00:00Z | 2024-07-15T00:00:00Z |
| opensuse-su-2024:14194-1 | ntpd-rs-1.2.0-1.1 on GA media | 2024-07-15T00:00:00Z | 2024-07-15T00:00:00Z |
| opensuse-su-2024:14193-1 | nodejs-electron-30.2.0-1.1 on GA media | 2024-07-15T00:00:00Z | 2024-07-15T00:00:00Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| cnvd-2025-26830 | Wazifa System control.php文件SQL注入漏洞 | 2024-11-07 | 2025-10-31 |
| cnvd-2025-26829 | Wazifa System updatesettings.php文件跨站脚本漏洞 | 2024-12-04 | 2025-10-31 |
| cnvd-2025-26828 | Wazifa System search_resualts.php文件跨站脚本漏洞 | 2025-02-17 | 2025-10-31 |
| cnvd-2025-26184 | Wazifa System profile.php文件跨站脚本漏洞 | 2025-02-17 | 2025-10-31 |
| cnvd-2025-26183 | Wazifa System control.php文件SQL注入漏洞 | 2025-02-17 | 2025-10-31 |
| cnvd-2025-26182 | Exam Form Submission dashboard.php文件SQL注入漏洞 | 2025-07-28 | 2025-10-31 |
| cnvd-2025-26181 | Exam Form Submission update_s3.php文件SQL注入漏洞 | 2025-07-30 | 2025-10-31 |
| cnvd-2025-26180 | Online Farm System register.php文件SQL注入漏洞 | 2025-08-01 | 2025-10-31 |
| cnvd-2025-26179 | Online Farm System /forgot_pass.php文件SQL注入漏洞 | 2025-08-01 | 2025-10-31 |
| cnvd-2025-26178 | Online Farm System categoryvalue.php文件SQL注入漏洞 | 2025-08-01 | 2025-10-31 |
| cnvd-2025-26177 | Exam Form Submission /register.php文件SQL注入漏洞 | 2025-08-01 | 2025-10-31 |
| cnvd-2025-26176 | Exam Form Submission delete_s8.php文件SQL注入漏洞 | 2025-08-01 | 2025-10-31 |
| cnvd-2025-26175 | Exam Form Submission delete_s7.php文件SQL注入漏洞 | 2025-08-01 | 2025-10-31 |
| cnvd-2025-26174 | Wazifa System updatesettings.php文件SQL注入漏洞 | 2025-08-10 | 2025-10-31 |
| cnvd-2025-26173 | Wazifa System postpublish.php文件SQL注入漏洞 | 2025-08-10 | 2025-10-31 |
| cnvd-2025-26172 | Exam Form Submission update_s7.php文件SQL注入漏洞 | 2025-08-10 | 2025-10-31 |
| cnvd-2025-26171 | Exam Form Submission update_s5.php文件SQL注入漏洞 | 2025-08-10 | 2025-10-31 |
| cnvd-2025-26170 | Online Event Judging System edit_judge.php文件SQL注入漏洞 | 2025-10-31 | 2025-10-31 |
| cnvd-2025-26169 | Online Event Judging System edit_criteria.php文件SQL注入漏洞 | 2025-10-31 | 2025-10-31 |
| cnvd-2025-26168 | Online Event Judging System edit_contestant.php文件SQL注入漏洞 | 2025-10-31 | 2025-10-31 |
| cnvd-2025-26167 | Online Event Judging System add_judge.php文件SQL注入漏洞 | 2025-10-31 | 2025-10-31 |
| cnvd-2025-26166 | Online Event Judging System add_contestant.php文件SQL注入漏洞 | 2025-10-31 | 2025-10-31 |
| cnvd-2025-26165 | Online Event Judging System action.php文件SQL注入漏洞 | 2025-10-31 | 2025-10-31 |
| cnvd-2025-26164 | Tenda CH22 fromNatStaticSetting函数缓冲区溢出漏洞 | 2025-10-31 | 2025-10-31 |
| cnvd-2025-26163 | Tenda CH22 formSetIpBind函数缓冲区溢出漏洞 | 2025-10-31 | 2025-10-31 |
| cnvd-2025-26162 | Tenda CH22 formRouteStatic函数缓冲区溢出漏洞 | 2025-10-31 | 2025-10-31 |
| cnvd-2025-26161 | Tenda CH22 formaddressNat函数缓冲区溢出漏洞 | 2025-10-31 | 2025-10-31 |
| cnvd-2025-26160 | Tenda AC6缓冲区溢出漏洞（CNVD-2025-26160） | 2025-10-31 | 2025-10-31 |
| cnvd-2025-26159 | Open5GS存在未明漏洞（CNVD-2025-26159） | 2025-10-31 | 2025-10-31 |
| cnvd-2025-26158 | ZTE MC889A Pro拒绝服务漏洞 | 2025-10-31 | 2025-10-31 |
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2025-avi-0274 | Multiples vulnérabilités dans MISP | 2025-04-04T00:00:00.000000 | 2025-04-04T00:00:00.000000 |
| CERTFR-2025-AVI-0279 | Multiples vulnérabilités dans les produits IBM | 2025-04-04T00:00:00.000000 | 2025-04-04T00:00:00.000000 |
| CERTFR-2025-AVI-0278 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2025-04-04T00:00:00.000000 | 2025-04-04T00:00:00.000000 |
| CERTFR-2025-AVI-0277 | Multiples vulnérabilités dans le noyau Linux de Debian LTS | 2025-04-04T00:00:00.000000 | 2025-04-04T00:00:00.000000 |
| CERTFR-2025-AVI-0276 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2025-04-04T00:00:00.000000 | 2025-04-04T00:00:00.000000 |
| CERTFR-2025-AVI-0275 | Multiples vulnérabilités dans Microsoft Edge | 2025-04-04T00:00:00.000000 | 2025-04-04T00:00:00.000000 |
| CERTFR-2025-AVI-0274 | Multiples vulnérabilités dans MISP | 2025-04-04T00:00:00.000000 | 2025-04-04T00:00:00.000000 |
| certfr-2025-avi-0273 | Vulnérabilité dans les produits Ivanti | 2025-04-03T00:00:00.000000 | 2025-04-03T00:00:00.000000 |
| certfr-2025-avi-0272 | Multiples vulnérabilités dans les produits Splunk | 2025-04-03T00:00:00.000000 | 2025-04-03T00:00:00.000000 |
| certfr-2025-avi-0271 | Vulnérabilité dans Tenable Nessus Agent | 2025-04-03T00:00:00.000000 | 2025-04-03T00:00:00.000000 |
| certfr-2025-avi-0270 | Multiples vulnérabilités dans les produits Cisco | 2025-04-03T00:00:00.000000 | 2025-04-03T00:00:00.000000 |
| CERTFR-2025-AVI-0273 | Vulnérabilité dans les produits Ivanti | 2025-04-03T00:00:00.000000 | 2025-04-03T00:00:00.000000 |
| CERTFR-2025-AVI-0272 | Multiples vulnérabilités dans les produits Splunk | 2025-04-03T00:00:00.000000 | 2025-04-03T00:00:00.000000 |
| CERTFR-2025-AVI-0271 | Vulnérabilité dans Tenable Nessus Agent | 2025-04-03T00:00:00.000000 | 2025-04-03T00:00:00.000000 |
| CERTFR-2025-AVI-0270 | Multiples vulnérabilités dans les produits Cisco | 2025-04-03T00:00:00.000000 | 2025-04-03T00:00:00.000000 |
| certfr-2025-avi-0269 | Multiples vulnérabilités dans les produits Moxa | 2025-04-02T00:00:00.000000 | 2025-04-02T00:00:00.000000 |
| certfr-2025-avi-0268 | Vulnérabilité dans les produits VMware | 2025-04-02T00:00:00.000000 | 2025-04-02T00:00:00.000000 |
| certfr-2025-avi-0267 | Multiples vulnérabilités dans MongoDB Server | 2025-04-02T00:00:00.000000 | 2025-04-02T00:00:00.000000 |
| certfr-2025-avi-0266 | Multiples vulnérabilités dans les produits Mozilla | 2025-04-02T00:00:00.000000 | 2025-04-02T00:00:00.000000 |
| certfr-2025-avi-0264 | Multiples vulnérabilités dans Trend Micro Deep Security Agent | 2025-04-02T00:00:00.000000 | 2025-04-02T00:00:00.000000 |
| certfr-2025-avi-0263 | Multiples vulnérabilités dans HPE Aruba Networking Virtual Intranet Access | 2025-04-02T00:00:00.000000 | 2025-04-02T00:00:00.000000 |
| certfr-2025-avi-0262 | Multiples vulnérabilités dans les produits Kaspersky | 2025-04-02T00:00:00.000000 | 2025-04-02T00:00:00.000000 |
| CERTFR-2025-AVI-0269 | Multiples vulnérabilités dans les produits Moxa | 2025-04-02T00:00:00.000000 | 2025-04-02T00:00:00.000000 |
| CERTFR-2025-AVI-0268 | Vulnérabilité dans les produits VMware | 2025-04-02T00:00:00.000000 | 2025-04-02T00:00:00.000000 |
| CERTFR-2025-AVI-0267 | Multiples vulnérabilités dans MongoDB Server | 2025-04-02T00:00:00.000000 | 2025-04-02T00:00:00.000000 |
| CERTFR-2025-AVI-0266 | Multiples vulnérabilités dans les produits Mozilla | 2025-04-02T00:00:00.000000 | 2025-04-02T00:00:00.000000 |
| CERTFR-2025-AVI-0264 | Multiples vulnérabilités dans Trend Micro Deep Security Agent | 2025-04-02T00:00:00.000000 | 2025-04-02T00:00:00.000000 |
| CERTFR-2025-AVI-0263 | Multiples vulnérabilités dans HPE Aruba Networking Virtual Intranet Access | 2025-04-02T00:00:00.000000 | 2025-04-02T00:00:00.000000 |
| CERTFR-2025-AVI-0262 | Multiples vulnérabilités dans les produits Kaspersky | 2025-04-02T00:00:00.000000 | 2025-04-02T00:00:00.000000 |
| certfr-2025-avi-0261 | Multiples vulnérabilités dans Microsoft Azure | 2025-04-01T00:00:00.000000 | 2025-04-01T00:00:00.000000 |